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5.0 Introduction 


The Role of Units 5 and 6 


Boolos and Jeffrey assume that their readers are already familiar with formal 
logic. In Chapter 9 they remind their readers about the basic ideas of first- 
order logic (which is the only logical system we shall be considering in this 
course) and in Chapters 10-13 they prove and discuss some interesting 
theorems about it. In this course we do not assume that you have met formal logic 
before, so Units 5 and 6 contain an introduction starting from scratch. Our work 
is directed towards Gédel’s Incompleteness Theorems, and in order to be able 
to reach them we shall leave out Chapters 10-13, though we shall mention 
briefly (without proofs) the chief facts about first-order logic contained in those 
chapters. 


What is a Formal System? 


Mathematics is usually written in a natural language such as English, 
; ; x a 
augmented with some special symbols, like ds and f. Natural languages have 
x 


great advantages but from our point of view they also have the defects of 
vagueness and ambiguity. In a formal language, however, we first state explicitly 
what the basic symbols of the language are, these being the analogues of the 
letters of the alphabet and the punctuation marks of written English, and then 
state precise rules for determining which sequences of these basic symbols count 
as expressions of the language. (This already contrasts with a natural 
language—could you give a precise rule for deciding which sequences of letters 
of the alphabet are English words?!) 


These rules are such that there is an algorithm for determining which sequences 
of our basic symbols are expressions of the language. Thus we could construct 
a Turing machine with the following property. If an arbitrary string of basic 
symbols is written on the tape (with the symbols of the string written on 
successive tape squares) and the machine is started scanning the left-most basic 
symbol, then the machine will halt with a single 1 on the tape if the original 
string was an expression of the language, and halt with a blank tape otherwise. 
Of course, for there to be such a Turing machine, our formal language can have 
only finitely many basic symbols, and this will indeed be the case. 


Usually, when carrying out mathematical arguments we do not state explicitly 
which logical principles we are using. In a formal system, the rules used in 
carrying out deductions are stated explicitly. Again they have an algorithmic 
character, so we could devise a Turing machine which would check whether a 
purported proof of the system really was a proof. 


What is the Use of a Formal System? 


Recall that in the historical background to Gédel’s theorems (as described on 
the first cassette tape), we asked you to keep in mind two questions at which 
this course is directed. Each of these questions provides a motivation for the 

setting up of a formal system for number theory. 


(i) Leibniz’s question: is there an algorithm for deciding which statements of 
number theory are true? 


To discover whether there is an algorithm for deciding which statements of 
number theory are true, clearly we need first to be able to express the 

statements of number theory in a form to which algorithms are applicable, 
that is, as strings of symbols. Also, if we had no algorithm to decide which 
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such strings were expressions, it would seem that we would have no hope 
of deciding which expressed true statements. Thus we must have a formal 
language for number theory in the sense described above. 


(ii) Hilbert’s question: can the consistency of number theory be proved using 
only non-dubious principles of finitary reasoning? 


Hilbert wanted a completely clear and finitary proof that number theory is 
consistent: that is, a proof, involving only the mechanical manipulation of 
finite strings of symbols, that one could never prove contradictory 
assertions about natural numbers. Thus one clearly requires, in order to 
make sense of this programme, a precise notion and theory of proofs. 


Once we have established a formal system for number theory, we can 
exploit the fact that the proofs of the system are obtained by manipulation 
of finite strings of symbols according to algorithmic rules, to try to show, 
using simple reasoning, that these manipulations cannot lead to a 
contradiction. That is, we can carry out Hilbert’s programme of trying to 
give a finitary consistency proof for number theory. 


We must, therefore, begin the description of our formal system, a task 
which will take us up to Unit 7. Our first requirement is a language. 


The Language of Formal Number Theory 


In this section we give a list of the basic symbols of the language, and the rules for 
determining which sequences of these symbols are expressions of the language. 


The Basic Symbols 


The first move in trying to decide which symbols we shall need might be to pick 
up a book on number theory and make a list of all the symbols it uses. This 
would, however, lead to an extravagantly long list. Our study of Turing 
machines has shown already the advantages of keeping things simple, and we 
approach the choice of symbols for number theory in the same spirit. We shall, 
in fact, discover that we can manage with remarkably few basic symbols. 


Consider, for example, how we might express Euclid’s Theorem that there are 
infinitely many prime numbers. We can do this by saying that, given any 
number, there is always a prime number which is at least as large as the given 
number. Thus, using the symbol V to mean ‘for all’, the symbol 3 to mean ‘there 
is’ (or ‘there exists’) and the symbol & to mean ‘and’, we get 


Vx dy (y is prime’ & x < y). 


With the aim of getting rid of the English phrase ‘is prime’, we note that the 
idea of a prime number can be expressed in terms of divisibility. So if we use z|y 
for 'z divides y', then we can express ‘y is prime’ as 


Yz (zly => (z-yorz-1)&yszl 


where we have used the symbol > to mean ‘implies’ (i.e. ‘if... then’). We ought 
to say here that we are regarding all our variables (z, y, x etc.) as referring to 
natural numbers 0, 1, 2, 3,..., rather than to, say, integers or real numbers. 
Thus the first part of the above expression (before the symbol &) is literally 
translated as: ‘for all natural numbers z, if z divides y then z equals y or z 
equals 1’. Clearly a natural number y will satisfy this statement if and only if y 
is prime or y equals 1. The number 1 is not usually regarded as a prime 
number, so we have added the symbols & y # 1 at the end of the expression. 
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But divisibility is defined in terms of multiplication, so that 3t (z-t = y) 
expresses z|y. Also ‘x < y’ can be expressed in terms of addition, namely by 

3s (s + x = y). (Notice that the expression 3s (s + x = y) is equivalent to x < y 
only because we are regarding the variable s as referring to natural numbers. If 
we are referring to integers say, then 3s (s + x = y) would certainly not express 
x € y. For example, 3s (s + 3 = 2) is true if we are referring to integers but false 
if we are referring to natural numbers.) So, using v to stand for ‘or’, and 
putting all this together, we see that Euclid's Theorem can be expressed by 


Vx 3y(vz Gt (z-t=y) > (z=y v z=1) &y #1 & As (s+ x=y)) 


Thus it turns out that Euclid’s Theorem can be expressed using a very limited 
stock of symbols. Some of these symbols, for example the symbol &, would be 
needed in any mathematical theory. These are called logical symbols. V, > and 
— are clearly also logical symbols. Any mathematical theory also uses variables 
to refer to the objects under consideration in that theory. Since we shall be 
interested in number theory, we intend the variables that we use to refer to 
natural numbers, although in fact, the logical rules that we eventually introduce 
for carrying out deductions will be valid no matter to which set of objects the 
variables are referring. 


Other symbols, such as +, are very special to number theory, and we call these 
arithmetic symbols. The arithmetic symbols include symbols for addition and 
multiplication, and apparatus to provide symbols for all natural numbers. It 
might be thought that this would involve having infinitely many different 
symbols. However, just as we use monadic notation for simplicity to represent 
numbers on the tapes of Turing machines, when it comes to formal number 
theory, we find we can make do with a symbol 0 to denote zero, and a symbol 
to denote the operation ‘add one’. (Thus we can denote, for example, the 
number two by 0”.) As with the variables, because we shall be interested in 
number theory, we intend the arithmetic symbols to represent the usual 
arithmetic operations on the set of natural numbers, e.g. + for addition. 
However, the formal system we shall describe will handle these symbols in a 
purely mechanical way that does not necessarily take into account their 
intended interpretation. To distinguish these symbols from their interpretations, 
we shall use a heavier print for the symbols, e.g. + rather than +. 


The basic symbols of the language of formal number theory are: 


(a) Logical symbols These come in five categories. 


(i)  Connectives: — & v > — (called respectively negation conjunction, 
disjunction, implication and bi-implication). 

(i) Quantifiers: V 3 (known respectively as the universal quantifier and the 
existential quantifier). 


(iii) Identity: = 
(iv) Punctuation symbols: ( ) 
(v) Variables: Xo, X, X5,... 


(b) Arithmetic symbols 0’ + - (known respectively as the zero symbol, the 
successor symbol, the addition symbol and the multiplication symbol). A 


Notice that the variables form an infinite list. If we don’t like the idea of having 
infinitely many different symbols, we can regard the variables as made up from 
the two symbols x and ,, so that, for example, x, can be regarded as an 
abbreviation for ‘x,,,” 


mee 


We have already mentioned the intended meanings of the connectives & (‘and’), 
v (or), — (implies or equivalently ‘if... then’) and the quantifiers V (‘for all’) 
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and 3 (‘there is’ or ‘there exists’). It might help you to know at this stage that the 
intended meaning of the connective — is ‘not’, and of ——» is ‘if and only if. We 
shall discuss the interpretations of all symbols more fully later in the course. 


Before giving the precise rules for deciding which sequences of these symbols are 
to be regarded as proper expressions of our formal language, let us take some 
examples of informal number theoretic statements and formulate them using 
only the symbols above. We hope that this will give you some idea of how 
mathematically rich these few symbols are. 


‘Every number is either even or odd.’ 


Firstly note that ‘xo is even’ may be written as 3x, x, = 2* x,. However, 2 is not 
a basic symbol, but as mentioned above, we can write 2 as 0", which contains 
only basic symbols. Thus ‘xo is even’ becomes 3x, xo = (0+ x,). Similarly, ‘xo is 
odd’ becomes 3x, xo = (2x, + 1) or, in terms of basic symbols, 

3x; xo = (0"*x,) +0). 


Thus 'every number is either even or odd' and can be written as 
Vxo (3x4 xo = (0"*x,) v 3x, xo = ((0"* x1) + 0’)), 

and this is just a string of basic symbols. 

‘Every number has a square root.’ 


A first reaction here is perhaps ‘but this is false”. However, the truth or falsity 
of these examples is not our present concern. For the moment we just want to 
show that this informal statement can be expressed with a string of basic 
symbols. Indeed, we shall wish to be able to express statements of number 
theory without knowing whether they are true or false—clearly Leibniz's 
question would be meaningless unless we could do this. 


‘xo has a square root’ can be written as 3x, x? = xy. Now x? is.not made up of 
basic symbols, but x,* x, is, so we may write ‘x, has a square root’ as 

3x, (x,*x,) = xg; and hence the informal statement ‘every number has a square 
root’ becomes Vx, 3x, (x,*x,) = Xo in our formal language. O 


Formation Rules for Terms 


The formation rules specify which sequences of the basic symbols are well- 
formed expressions of the language. The basic statements of the language consist 
of equations between numerical expressions (such as xy = ((0”-x,) + 0°) of 
Example 1 or (x; * x1) = xo of Example 2), and more complicated statements are 
built up from these using the connectives and quantifiers. So we begin with a 
precise definition of which sequences of symbols are well-formed numerical 
expressions. We call such expressions terms. The idea of the definition of a term 
is this. We first specify that the string consisting of the single symbol 0 is a term 
and that each string consisting of just a single variable (i.e. xo, x,,...) is a term, 
and then state how more complicated terms may be built up from these terms 
by successive applications of addition, multiplication and the successor symbols. 
The key feature of this building process will be that it can be applied in reverse 
to any string of basic symbols and we will eventually arrive back at the symbol 
0 and variables if and only if the original string was indeed a term. For 
example, this analysis applied to the string 


((0" -x,) +0’) 
will go as follows. The string ((0" - x,) + 0') is the result of applying the addition 
symbol + to the strings (0'' - x,) and 0’. Now the string 0’ is the result of 


applying the successor symbol ' to the string 0, and this part of the analysis is 
complete. It remains to analyse the string (0'' - x,). This string is the result of 


DEFINITION 


M335 5.1 


applying the multiplication symbol - to the strings 0’’ and X,. Since x, isa 
variable, it remains only to analyse the string 0°’, which is the result of applying 
the successor symbol to the string 0’, which is itself the result of applying the 
successor symbol to the string 0. Since in all cases we have reached the symbol 
0 or a variable, the analysis is complete and we deduce that the original string 
((0" - x,) + 0’) is indeed a term. 


Notice that in this analysis we eliminated the symbol + before the symbol - 
This order of doing things is of course dictated by the position of the 
parentheses. The string (0'' - (x, + 0')) would be analysed in a different way 
from the string ((0' - x,) + 0’), and obviously has a different intended meaning. 
So our definition must be specific on the positioning of brackets. Here, then, is 
our precise definition of a term. 


(1) 0 and each variable by itself are terms. 
(2) If t,, T, arè terms then so also are 1}, (t, + 15) and (1, * T3). 


(3) A sequence of symbols is a term only if it follows from a finite number of 
applications of (1) and (2) that itis a term. A 


Clause (2) of the definition says that, for example, if we place the symbol + 
between two expressions which are terms, and a pair of brackets round the 
outside, then the resulting expression is also a term. Thus, as the expressions 0 
and x, are both terms by clause (1), (0 + X3) is a term by clause (2). We can, of 
course, apply clause (2) again to (0 + x) and, say, X5 (since we now know that 
both these expressions are terms) to deduce that (0 + x3)’ and ((0 + x4): x;) are 
both terms, and so on to obtain more complicated terms. Clause (3) new tells 
us that an expression is a term only provided it can be obtained in this way. 
This clause is needed to ensure that gobbledegook expressions such as +0x9( 
do not get regarded as terms. We have insisted on a finite number of 
applications of clauses (1) and (2) since an infinite number of such applications 
would clearly result in an expression of infinite length (e.g. we could obtain 
.--(( + 0) + 0) + 0) +... which we do not regard as a string of symbols; and 
even if we did, such expressions could not be handled by a Turing machine). 


Apart from providing a method for generating terms, the definition also suggests 
a way for telling whether or not a given sequence of basic symbols is a term. 
Essentially we analyse the given sequence by applying clause (2) in reverse to 
see whether we get back to variables or 0. For example, consider the expression 
(((x1 * x2) + 0)- (x, + (0 *x5))). If we write Tı for ((x1* x7) + 0") and t3 

for (x, + (0” -+ x;)), then the given expression is (t; +t). Hence by clauses (2) 
and (3) this will be a term if both c, and t, are terms. We now analyse t, and 
T2 Separately in the same way, and continue this process until we either (a) 
reach variables or 0 throughout, in which case the original expression was 
indeed a term, or (b) reach an expression which is neither a variable nor 0 nor 
of the form 1}, (t, + t2) or (t1 * t2) (so no further analysis is possible), in which 
case the original expression was not a term. This analysis may be represented 
diagrammatically as follows. 


(x, * x7) + 0"): (x, + (0 x,))) 


er) Gis sun 


| 
(xipx?) 0" (0' - x.) 
Po E 


Xi xy Q 


N 


@ kK 
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The circled expressions are all terms by clause (1) of our definition. The 
diagram shows how we can build up more complicated terms using clause (2). 
Every expression which is a term can be analysed in this way to show that it is 
a term. This sort of analysis will also reveal which expressions are not terms. 
Take, for instance, the expression +0x,(. This expression is clearly neither a 
variable by itself nor the symbol 0. The expression does not end in a ' so it is 
not of the form 14; nor does it begin and end with appropriate brackets, so it is 
not of the form (t, + 15) or (1; * 12). Thus it cannot be analysed by either clause 
(1) or clause (2) of our definition, so it is not a term. 


A more subtle example of an expression that is not a term is (x,*0 + x4). Our 
analysis of this could start as 


(70 + x) 


or as 
(x,°0 + x3) 


0 4 x, 


Either way we obtain an expression, x;*0 or 0 + x3, which is clearly neither a 
variable by itself nor the symbol 0—so we cannot analyse it further by clause 
(1)—and which, because of the lack of appropriate brackets, is not of the form 
Ti» (Ti + 25) or (1,7 1;)—thus we cannot analyse it further by clause (2), and so 
it is not a term. 


Essentially, the reason why we have formulated our definition of term so that 
the expression (x, *0 + x3) is not a term, is because this expression is 
ambiguous: it could stand for ((x, *0) + x3) or (x, * (0 + x3)). In everyday 
mathematics, one might have a convention that one of the symbols +, + has 
precedence over the other, to ensure that an expression like (x; *0 + x3) is 
unambiguous. Although we could adopt such a convention in our formal system, 
we prefer to ensure this unambiguity by means of the use of the outer pairs of 
brackets in the expressions (1, + t2) and (1, * t2) in clause (2). 


Here are some further examples of analyses of expressions to check whether or 
not they are terms. 
(((0 + 0): (0° - x ,)) + 0) is analysed as follows. 
(((0" + 0): (0 -x5)) + 0) 
(9 + 0): (07 < x5)) 


0” +0) (9x 


| 

0 
, 
0 


Thus (((0 + 0)- (0''* -x5)) + 0) is a term. 
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EXAMPLE 4 ((x, + (x, *0°)))+ x2) is analysed as follows: 
(6x5 + (3,0): x2) 
(x3 + (x, *0^))) x3 


(x10) 


6 V 


Thus ((x3 + (x; -0")))- x) is not a term since we arrive at an expression, namely 
0°), which is plainly neither a variable nor 0, and cannot be analysed further by 
clause (2) of the definition. 


PROBLEM 1 Analyse each of the following strings of basic symbols in the way described 
above and hence decide which are terms and which are not. 
G) (+ x1) +x)" + (x, +0") (iii) (xg*(x, + 0°") 
Gi) (x, +0") Yx) + (x - (0)) (iv) (0+ +0) 

SOLUTION 1 (i) (Oxi) x) + (x, 4-0) 


/ 
((0*x,): x)" a 
iiri e3 T 


((0*x,):x,) 0' 


P & à 


d b 
Hence (i) is a term. 
Gi) — (9-0): Vx) + (x3 + (0))) 


The expressions Vx; and (0) cannot be analysed further and are neither 
variables nor 0. Hence (ii) is not a term. (Of course it is easy to see that 
no term can contain the symbol V.) 


(ili) — (xg Quy 0777) 
(xs +0") 
x (xo + 0") 
| | 


À Q o 
€) 
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Hence (iii) is a term. 
(iv) We could begin the analysis of this expression in two different ways: 
O++0) or (0-4 40) 
/ D @ \ 


+ EI 
? 


vo 


but in either case we arrive at an expression, 0 + or + 0, which cannot be 
analysed using clause (2) of the definition and is neither the zero symbol 
nor a variable. Hence (iv) is not a term. Bl 


We hope that you are reasonably convinced that it is possible to devise a 
Turing machine that will recognize whether a given string of our basic symbols 
is or is not a term of our language. In case you are not sufficiently convinced, 
we have provided in the Appendix to this unit an outline of how such a 
machine could work. However, this Appendix is purely optional reading and 
contains no assessable material: it should not be read if you are short of time. 


Formation Rules for Formulas 


We are now in a position to make precise our formal equivalent of a 
mathematical statement, which we shall call a formula of our language. (This 
use of the word formula of course differs from the everyday mathematical use of 
the word.) Our basic building blocks will be the equivalents of statements 
asserting that two numerical expressions are equal. We have already defined the 
formal equivalent of numerical expressions, namely terms, and our formal 
language includes the identity symbol = with precisely the intention of 
representing equality. We call these basic building blocks atomic formulas. 


An expression is an atomic formula if and only if it has the form 
T = 


where t, and t, are terms. Å 


In other words, all the atomic formulas are obtained by taking two terms 

and placing the identity symbol between them. For example x, = 0, x, = x;, 
((x1* x3) + (x1*x3)) = (x17 (x2 + x3)), x5 = X2, are all atomic formulas 

since the expressions xo, 0, X1, X2, x5, ((x1* x5) + (x1*x3)) and (xi* (xa + x3)) 
are all terms. 0 = 0-0 is not an atomic formula since, although 0 is a term, 
0-0 is not a term (as the brackets are missing). x, = (0*x5) = 0 is not 

an atomic formula since it contains two occurrences of the identity symbol. 


It should be fairly clear that there is an algorithm for determining whether or 
not a given expression is an atomic formula. Simply check that the given 
expression has exactly one occurrence of the identity symbol. If it doesn't, the 
expression is not an atomic formula; if it does, analyse the expressions on either 
side of the identity symbol separately to see if they are terms. If they both are 
terms, the original expression was an atomic formula; if at least one is not a 
term, the original expression was not an atomic formula. 


Which of the following are atomic formulas? 
G) Qux) = (x; + x3) 

(i) (xg, +0) = (0 + 0) 

(ili) (x,*x,) = (5x4) 

(iv) x, = 

(v) x 9°0 =0-x, 


SOLUTION 2 
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(i) (x; * x3)' and (x; + x5) are both terms. So (i) is an atomic formula. 
(ii) Similarly, this is an atomic formula. 

(iii) Similarly, this is an atomic formula. 

(iv) A blank space is not a term. So (iv) is not an atomic formula. 


(v) Neither xo*0 nor 0* x, are terms (as the brackets are missing), so (v) is not 
an atomic formula. Bi 


We now describe the set of all formulas of our formal language. The idea is that 
we allow as formulas exactly those strings of basic symbols that *make 
mathematical sense’ when we read V as ‘for all’, 3 as ‘there exists’, & as ‘and’, 

v as ‘or’, — as ‘not’, > as ‘implies’ and ——» as ‘if and only if. However, as we 
have pointed out before, we must be precise enough for our definitions to be 
recognized by a machine, so this won't do as a definition. Instead, we build up 
more complicated formulas from the atomic formulas in a way analogous to 
that in which the terms are built up from 0 and the variables. 


(1) Each atomic formula is a formula. 


(2) If $, w are formulas and x is any variable, then — $, (6 & y), ($ v V), 
(6 > V), (6 — V), Vx $ and 3x $ are also formulas. 


(3) A sequence of symbols is a formula only if it follows from a finite number of 
applications of (1) and (2) that it is a formula. 


Thus, for example, we have seen that (x, + x3)’ = (x, + x5) is an atomic 
formula, so it is a formula by clause (1). Since x, is a variable, it follows from 
clause (2) (about V) that Vx, (x, + x) = (x, + x5) is a formula. Similarly, since 
x, is a variable it follows that Vx, Yx, (x, + x2)’ = (x, + x4) is a formula. 


Because the definition has the same structure as the earlier definition of a term, 

the method of analysing sequences of symbols to determine whether or not they 
are formulas is similar to the analysis of terms we described earlier. Let us apply 
this method to show that the expression 


Vx, (3x5 (,*x,) = (x5 + x2) > 3x, x, = (x4 + x3) 
is a formula. 
Vx, (3x5 (x1 *x,) = (x; 4- x5) > 3x4 x, = (x3 + x3) 
Clause (2) (V) 
(3x? (7x1) = (x; + x;) > 3x4 x, = (x3 + X3)) 
Clause (2) (2) 


3x, (,x,) = (x, + xj) dx; x, = (x3 + x3) 


Clause (2) (3) Clause (2) (3) 


(x, °x) = (x2 + x2) 


Notice that as long as we arrive at an expression containing either a quantifier 
or a connective we must be able to analyse further, until we reach an expression 
containing no quantifiers or connectives (those expressions circled in the above 
diagram). According to the definition, these must be atomic formulas (if the 
original string is a formula) and we already know how to check this. Here, we 
must check that the strings (x, -x,) = (x, + x) and x, = (x3 + x3) are atomic 
formulas, which we leave to the reader. 


A proof that Vx, (3x; (xi*x1) = (x2 + xj) > 3x3 xı = (x4 + X3)) is a formula 
can be given by reading the diagram from bottom to top, as follows. 
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(x1 *x,) = (x; + x2) and x, = (x, + x4) are atomic formulas (we assume you 
have checked this) and are therefore formulas by clause (1) of the definition. 


Thus, since x, is a variable, 3x, (x,*x,) = (x, + x5) is a formula by clause (2). 
Similarly, 4x, x, = (x + x3) is a formula. 


Therefore (3x; (x,*x1) = (xz + x) 5 4x3 xı = (x3 + x3)) is a formula by 
clause (2). 


Thus, since x, is a variable, 


Vx, (3x5 (x,*x4) = (x5 + x5) > 3x4 xı = (x3 + x3)) 


is a formula by clause (2). 


Analyse each of the following expressions and hence decide which are formulas. 
(i) Veg = 3x, (x4*x4) 9 X; 

(i) (Exo x, = (xo 0") v x, 20) v x, — 0") 

(ii) (x9 20 v x, =0& x, =0) 

(i) Yx —3x, (x,*x,) 2 xo 


—3x, 6,7x) = Xo 


3x4 (x,*x,) 2 xg 


Thus (i) is a formula. 


(i) (Exo x, = (xo + 0") v x, 20) v x, = 0") 


Exo x, = (xo + 0") v x, =0) 


X, = (xo + 0") 
Thus (ii) is a formula. 
(iii) There are in fact two possible analyses here: 


(x) =0 v x, =0& x, =0) 


\ 


Xo =0 x, =0&x,=0 
? 
or 


(x9 =O v x, =0&x,=0) 


Xo =O0v x,=0 


2 


In either case we arrive at an expression which is not atomic and cannot 
be analysed further. Thus (iii) is not a formula. In the first case, the 
expression x, = 0 & x, = 0 contains the connective & so certainly cannot 
be atomic. Also, it cannot be split using clause (2) (in reverse) since it is 
not in any of the required forms—essentially, the brackets are missing. 
Similarly, for x; = 0 v x, = 0 in the second case. Bi 


DEFINITION 


EXAMPLE 5 


As before, we hope that you are convinced that there is a Turing machine that 
can recognize whether or not a string of symbols written on its tape is a 
formula of our formal language. (If you are interested, an algorithm can be 
devised using a very similar technique to that used in recognizing terms dealt 
with in the Appendix. If $ is a formula which is not an atomic formula, define 
the leading connective occurrence (l.c.o.) in $ to be the last occurrence of V, 3, —, 
&, v, > or <> used in building up $ using clause (2) in the definition of a 
formula. Then a Turing machine can recognize the l.c.o. in a formula ¢ using 
the ‘counting brackets’ argument, just as we recognize the 1l.s.o. in a term.) 


For technical reasons that will become apparent later, we now introduce the 
idea of a subformula. 


The formulas that occur in the analysis of a given formula ¢ are called the 
subformulas of p. We count $ as one of its own subformulas. A 


Let us find the subformulas of the formula 
((—x, =0 v 3x, xg = (x, + x4)) > Vx; Ixo (x, + x9) = x5). 
Effectively we have to produce the analysis for this formula as if we were 


checking whether it is a formula. We obtain the following. 


((—x, =0 v 3x, xy = (x, + X,)) > VX, 3xg (x, + xo) = x2) 


(—x, =0 v Ax, xy = (x, x,) Yx, 3xo (x, + xo) = x; 


—x,=0 AX, Xo = (xi xi) Ixo (x, + Xo) = X5 


x, =0 Xo = (Xi + x4) (x1 + x)-x 
The subformulas of the formula are precisely the formulas obtained at each 
stage of this analysis. Thus the formula has the following nine subformulas. 
(i) x,=0 
(ii) -x,=0 
(iii) xg = (x, x) 
(iv) (x, + Xo) =X, 
(v) AX, xo = (x; xj) 
(vi) Ixo (x, + xo) = x; 
(vii) (—x4 20 v 3x, xo = (x1  x1)) 
(viii) Vx, 3x (x, + xo) = x; 


(x) ((—x,—90 v 3x, xo = (xi + x1)) > Vxa Ixo (xı + xo) = x2) 


PROBLEM 4 List the subformulas of the following formulas. 


(i) Vxg —3x, (x1 * x1) = xg (This is the formula analysed in Problem 3(i).) 

(i) ((AX9 x, = (x9 + 0") v x, =0) v x, =0') (This is the formula 
analysed in Problem 3(ii).) 

Gii) x, = ((x2* x3) + 0) 


SOLUTION 4 (i) From the analysis in Solution 3(i), we see that the subformulas are 


(a) (4x1) = xo 

(b) 3x, (x,* x1) = xo 

(c) —3x, (x,* x) = xo 

(d) Vxy —3x, (x,*x,) = xo 


(ii) From the analysis in Solution 3(ii), we see that the subformulas are 
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(a) x, = (xo + 0") 

(b) x, =0 

(c) x, 2 0 

(d) 3x, x, = (xo + 0°’) 

(e) (Axo x, = (x9 + 0") v x, — 0) 

(f) (Exo x; = (xy + 0") v x, 20) v x, 20) 


(iii) Since this formula contains no occurrences of connectives or quantifiers, 
the analysis just looks like 


x, = ((x5* x3) + 0) 
(i.e. the formula is atomic). Thus there is only one subformula, namely 
x, = ((x2* x3) + 0). B 


As before, we hope you are convinced that a Turing machine could be devised 
which recognized subformulas of a given formula. We give no details of such a 
machine here. 


Formal Proof 


‘Humpty Dumpty looked doubtful. “Td rather see that done on paper,” he 
said. 
Through the Looking Glass, Lewis Carroll. 


We have already remarked that whereas in everyday mathematics we do not 
state explicitly which logical principles we are using, in a formal system the rules 
that can be used in carrying out deductions are stated explicitly. Before we 
describe the rules that we are going to allow, we need to think about what sort 
of thing an informal mathematical proof is, the intention being that our 
precisely defined notion of formal proof should correspond as closely as possible 
to the informal notion used by mathematicians. 


Since the informal notion is not absolutely precise, we cannot hope to give an 
exact definition. The best we can expect is a more-or-less accurate description: 


*A mathematical proof is a finite sequence of mathematical assertions 
which forms a correct and convincing argument for the desired conclusion 
from stated assumptions." 


‘Sequence’ means that the assertions are in some definite order, and ‘finite’ 
means that the argument comes to an end. ‘Correct’ means that the assertions 
do really follow from the stated assumptions. It is because proofs are correct 
arguments that when we have proved something we know it is true. In the next 
sections we begin to make more precise what it means to say that one assertion 
really does follow from another. 


The correctness of an argument is a matter of logical fact; in contrast, 
‘convincing’ is a psychological notion. From our point of view this is 
unsatisfactory. We want it to be a matter of objective fact that a sequence of 
assertions counts as a formal proof. Indeed, we require that there-is actually an 
algorithm for determining whether or not a sequence of formulas counts as a 
formal proof, and it will become evident that the rules for carrying out 
deductions, which we shall describe later, meet this requirement. 


The rest of this unit and all of Unit 6 are devoted to describing our formal 
system. As we want formal proofs to correspond to the proofs we use in 
everyday mathematics, let us look at such an everyday proof, and see how this 
can be reorganized to bring out its logical structure. The example we have 
chosen might be found in an elementary book on number theory. 
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Theorem If the square of a natural number is even, the number itself is even. 


Proof Assume n? is even. Now assume n is odd. Then, by definition, there is 
a natural number k such that n = 2k + 1. Hence n? = (2k + 1)". But 

(2k + 1)? = 4k? + 4k + 1 = 2(2K? + 2k) + 1, so n? = 2(2k? + 2k) + 1, which 
shows that n? is odd, contradicting our initial assumption. Hence n cannot be 
odd, so n is even. Thus, if n? is even, n itself is even. Bl 


The above is a perfectly good and correct everyday proof. However, it is not in 
the best form for a machine to check that it is indeed correct. This is largely 
because the proof leaves unsaid much of the justification of the steps it uses. For 
instance, when we write ‘n? = (2k + 1)?... and (2k + 1)? = 2(2k? + 2k) + 1, so 
n? = 2(2k? + 2k) + 1’ we assume the reader is familiar with the rule that allows 
us to deduce that a = c from the equalities a = b and b = c between natural 
numbers a, b, and c. Of course, in everyday maths, it is perfectly reasonable to 
assume that a.reader will take this rule for granted. But a machine cannot take 
it for granted: a machine needs the rule and the use of the rule to be spelt out. 


Thus, as a first step in our description of a formal proof, let us rewrite the 
above in a different format. Firstly, we shall use a separate line for each 
assertion made in the argument (changing the English in places, for 
convenience). Secondly, we shall give each line a number corresponding to the 
place of the assertion on that line in the argument. This will help us to refer 
quickly to the lines of the argument. (This is, of course, quite common practice 
in mathematics, for instance when one wishes to refer to important equations.) 
Next, to the right of each assertion, we shall write down the justification for that 
assertion—as this justification will often be in terms of earlier assertions, our: 
line numbering is particularly useful here. Our rewritten proof is as follows. 


Second Version of the Proof 


Line number | Assertion made Justification 

(1) n? is even Assume 

(2) n is odd Assume 

(3) For some number k, From (2), by definition of ‘odd’ 
n=2k+1 

(4) n? = (2k + 1)? From (3) 

(5) (2k + 1)? = 4k? + 4k +1 

(6) Ak? + 4k 1 Algebraic manipulations 

= 2QK? + 2k) +1 

(7) (2k + 1)? = 2(2k? + 2k) +1 From (5) and (6) 

(8) n? = 2(2k? + 2k) +1 From (4) and (7) 

(9) For some number |, From (8), putting | = 2k? + 2k 
n=21+1 

(10) n? is odd From (9), by definition of ‘odd’ 

(11) n? is odd and n? is even From (10) and (1) 

(12) n is not odd From (11), ‘proof by contradiction’ 

(13) n is even From (12) 

(14) n? is even implies n itself (13) has been deduced from (1) 
is even 


The way that our layout separates the assertions made from their justification, 
ie. the rules used to arrive at one assertion from previous ones, is a feature we 
shall build into our idea of formal proof. Thus a formal proof will consist of a 
sequence of assertions, each of which is accompanied by a reference to the rule 
by which it was derived from previous assertions. 
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In our informal proof, it seems that we are using a large number of different 
rules. But, in fact, we are going to reduce these to nine different rules which we 
shall explain in this unit and Unit 6. Before we start looking at these rules, there 
is one simple but important refinement we should like to make to the format of 
our proof, as follows. 


Most proofs, formal and informal, contain assertions that are in fact 
assumptions, like lines (1) and (2) in the proof above. Various conclusions are 
drawn by working from these assumptions: for instance, by line (11) we have 
concluded from our two assumptions that n? is both even and odd (giving us a 
contradiction, so that it cannot be the case that both assumptions are 
simultaneously true). It turns out to be very helpful to keep a record on each 
line of the proof of the assumptions from which we have derived that line. For 
instance, if we look at the justification of line (8), we see that it follows from 
lines (4) and (7). Now line (4) follows from line (3), which in turn follows from 
line (2); but line (2) is an assumption which depends on nothing earlier in the 
proof. Also line (7) follows from lines (5) and (6), which are justified by simple 
algebraic properties of the natural numbers (such as the distributive law, 
commutative law etc.). Let us just write AP for the algebraic properties used 
here. (They are not really our main concern at this stage, although in a deeper 
analysis of this proof one would have to investigate exactly which such 
properties are being used.) 


Thus the assertion on line (8) depends ultimately on the assumption on line (2) 
and AP. We usually express this fact by saying that the assumptions in force on 
line (8) are line (2) and AP, or that line (8) depends on the assumption (2) and 
AP, and we are going to indicate this by writing ‘2, AP’ to the left of the line 
number. If we do this for each line we obtain the following. 


Third Version of the Proof 


Assumption Line number Assertion Justification 
1 (1) n? is even Assume 
2 (2) nis odd Assume 
2 (3) For some number k, From (2), by definition 
n=2k+1 of ‘odd’ 
2 (4) n? = (2k +1) From (3) 
AP (5) (2k + 1)? 
= 4k? + 4k +1 
AP (6) 4k? 4+ 4k +1 Algebraic manipulations 
= 2(2k? + 2k) +1 
AP (7) (2k + 1)? 
= 2(2k? + 2k) +1 From (5) and (6) 
2, AP (8) n? = 2(2k?,+ 2k) +1 From (4) and (7) 
2, AP (9) For some number l, From (8), putting 
n^ -2l41 | = 2k? + 2k 
2, AP (10) n? is odd From (9), by definition 


1, 2, AP (11) 


n^ is odd and n? 


of ‘odd’ 
From (10) and (1) 


is even 
1, AP (12) nis not odd From (11), ‘proof by 
contradiction’ 
1, AP (13) n is even From (12) 
AP (14) n? is even implies n (13) has been deduced 


itself is even 


from (1) 
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We have written the number 1 at the extreme left of line (1) because the 
assertion *n? is even' is an assumption, and so naturally the assumption in force 
on line (1) is just the assertion that occurs there. Similarly for line (2). Now, to 
find the assumption in force on line (3), we look at the justification for the 
assertion made there, where we see that line (3) follows from line (2). So line (3) 
depends on the same assumptions that line (2) depends on. Line (2) has the 
number 2 written at its extreme left, so we write the number 2 to the left of line 
(3). Similarly, line (4) follows from line (3) where the assumption in force is just 
2, so we write 2 to the left of line (4). We carry on in this way, keeping track of 
assumptions, until we reach line (11). (We leave you to verify the numbers 
written to the left of lines (5) to (10).) Line (11) follows from lines (10) and (1), 
so we pool all assumptions in force on those lines to get 1,2, AP to the left of 
line (11). Now, what has been proved at this stage in the argument? Our analysis 
reveals (on line (11)) that the assumptions 1,2, AP lead to a contradictory 
statement, namely ‘n? is even and n? is odd’. Hence not all of these assumptions 
can be simultaneously true. Thus if we assume that line (1) and AP (ie. the 
algebraic properties used) are true, then line (2) must be false. Now, line (2) is 
the assertion ‘n is odd’, so with the assumption 1 and AP it follows that ‘n is not 
odd', and this is precisely what we have indicated on line (12). The proof is 
essentially complete at line (13) since this line states that the assertion ‘n is even’ 
follows from assumption 1, i.e. ‘n? is even’ (also assuming AP). However, it is 
neater to have the actual statement of the theorem we are proving on the last 
line of the proof, so we incorporate assumption 1 into the assertion on line (14), 
leaving AP as the only assumption on the left of this line. 


These last lines in the third version of the proof illustrate the advantage of 
keeping track of the assumptions in force on each line. For a casual glance at 
line (13) in our second version of the proof might suggest that we have proved 
the statement ‘n is even’, which of course we have not. We have proved only 
that ‘n is even’ assuming ‘n? is even’, and this is made perfectly clear in line (13) 
of the third version. Also, as AP remains an assumption on line (14), we have 
revealed that some algebraic properties of the natural numbers have been used 
in the original proof. 


Now the third version of our proof is still essentially informal. However, our 
notion of formal proof will copy its layout, so that a formal proof will consist of 
a table with columns representing: 


Assumption Line number Assertion Justification 


An assertion in a formal proof will be simply a formula of the formal language 
(as defined in the previous section). The justification will consist of a reference 
to the use of one of nine rules that we shall define. The rules must, of course, tell 
us when one formula may be derived from others, and on what assumptions this 
formula depends. From the last line of the table we can claim that the assertion 
on that line has been formally proved from the assumptions in force on that 
line. 


In the rest of this unit and in Unit 6 we shall look at the rules that can be used 
in formal proofs and how they are used. 


We begin with the formal rule that corresponds to the one used in lines (1) and 
(2) of the informal proof above, that is, the rule that corresponds to making an 
assumption. For this reason, the first rule of deduction of our formal system is 

called the rule of assumptions. 


RULE The Rule of Assumptions (Ass) 
Any formula may be introduced on a line of a proof. The assumption in force 
on this line is the formula itself. A 
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We use the annotation Ass on the right of a line to indicate that the Rule of 
Assumptions has been used. Thus a line on which this rule is used will have the 
following form. 


Assumption Line number Formula Justification 
k (k) d Ass 


Notice that the assumption number is the same as the line number. That is 
because, as specified by the rule, the assumptions in force on a line where the 
Rule of Assumptions is used consist just of the formula introduced as an 
assumption on that line. We can now give you an example of a formal proof: 


1 (1) dx Xo = Xo Ass 


This is a formal proof of the formula 3x, x, = x, from the assumption of the 
formula on line 1, ie. from the formula 3x, x, = x. Thus we have a proof of 
Ixo Xo = Xo assuming 3x, Xo = xo. 


You might be pleased to learn that more rules will be introduced soon! But do 
not undervalue the Rule of Assumptions: formal proofs, and informal ones like 
the proof of ‘if n? is even then n is even’, can rarely be produced without using 
this rule, for instance to get started. 


Logical Consequence and Truth Tables 


We begin this section with an important observation that may have occurred to 
you already. It is that in specifying the formation rules of our language we have 
at no stage needed to refer to the intended meaning of our symbols. (Examples 
1 and 2 of Section 5.1 did so, but in all subsequent examples we were careful 
never to refer to ‘what is meant’ by the symbols or formulas.) It is because we 
are able to specify which sequences of symbols are well-formed formulas without 
referring to meanings that we are able to devise a Turing machine to test 
whether or not a sequence of symbols is, in fact, a formula. Turing machines 
operate by recognizing the shapes and arrangements of symbols, but they 
cannot understand the meaning of the expressions written on their tapes. 


When it comes to specifying the rules of deduction of our formal system, 
however, the intended interpretation of our symbols becomes important. Thus 
to say, for example, that ‘from $ and ($ > y) we may conclude y? is a valid 
inference, depends very definitely on our interpretation of the connective —. 


Why do we say that the above inference is valid? It is because whenever $ and 
(@ > y) are interpreted as being true, then y must also be true. At first sight it 
may seem strange to talk about formulas being interpreted as being true, but 
here it is important to remember that although we have devised our language in 
order to express statements of number theory, nothing we have said so far 
implies that our formulas must be interpreted in that way. A.formula which is 
true when interpreted as being about numbers may be false when given other 
interpretations. For example 


Vxo Vx; (xo* x4) = (x1 * x9) 


is true if interpreted as referring to multiplication of positive integers, but false if 
interpreted as being about matrix multiplication, since, for example, 


ZIEHT 
E36 3-3 


ut 
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Logically valid inferences, therefore, are those which do not depend on any 
special interpretation given to the arithmetical symbols, but whose validity 
derives solely from the meanings given to the logical symbols (i.e. the 
connectives and the quantifiers). The logician Gottlob Frege described the use 
of logic as ‘a way that, disregarding the particular characteristics of objects, 
depends solely on those laws on which all knowledge rests’. The laws to which 
Frege refers are those which tell us which deductions are logically valid. A 
deduction is logically valid if the conclusion is a logical consequence of the 
premises. The next important definition makes clear what we mean by logical 
consequence. 


The formula y is a logical consequence of the formulas ¢,,...,, if every 
interpretation of the non-logical symbols under which all the formulas ¢,,..., y 
are true also makes the formula y true. 


For this definition to be precise, we must, of course, explain what we mean by 
'an interpretation of the non-logical symbols making a formula true'. In our 
language of formal number theory, the non-logical symbols are just the four 
arithmetical symbols (0, ’, + and +) and an account of their possible 
interpretations will be given in Unit 7. However, we wish now to emphasize the 
difference between the arithmetical symbols and the logical symbols, in order to 
make the above definition clearer. 


While the arithmetical symbols will have many interpretations (for example, 
possible interpretations of the symbol + will include addition of natural 
numbers, addition of real numbers, etc.), the logical symbols will have a fixed 
interpretation. The reason for this is best explained by looking at examples from 
ordinary English. Consider the following three arguments. 
(1) If he races on soft ground then my horse will win. 

My horse is racing today and the ground is soft. 

Therefore my horse will win today. 
(2) He hit the ball with the spin and he hit it hard. 

Therefore he hit the ball hard. 
(3) All men are mortal. 

Socrates is a man. 

Therefore Socrates is mortal. 


Obviously all three are valid arguments, but from where does this validity 
derive? Not, we claim, from the actual subject matter of the statements involved. 
No knowledge of the turf, cricket or Socrates is required to see that the above 
arguments are correct. Rather, their validity derives solely from the everyday use 
of the English ‘connecting’ words ‘if... then...’, ‘and’, ‘all’ etc. Thus the truth of 
the statement ‘he hit the ball with the spin and he hit it hard’ guarantees the 
truth of the statement ‘he hit the ball hard’ simply because of the meaning of 
the word ‘and’, and not because of the meanings of ‘hit’, ‘ball’ or ‘spin’. 


Of course, the statement ‘he hit the ball with the spin and he hit it hard’ may be 
false or inapplicable in a given situation, so we may deduce nothing from it 
concerning that particular situation. However, this does not invalidate the 
argument (2) above, as the only thing that is being said there is that 


if in a certain situation it is true that ‘he hit the ball with the spin and he 
hit it hard’ 


then it must be true that, in the same situation, ‘he hit the ball hard’. 
Indeed, if A and B represent two statements, 

if we are given that the statement (A and B) is true 

then B is forced to be true (as is A, of course). 
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We hope that this shows up the ‘content-free’ nature of argument (2) above. 
Similarly, (1) and (3) are just particular cases of generally valid arguments. In 
argument (1) we are using just the meaning of the connecting words ‘if... 
then...’: 

whenever (if A then B) and A are both true 

then B must be true, 


no matter what meanings the statements A and B have. Similarly argument (3) 
has the form: 


if (all X are Y) and (Z is X) are both true, 
then (Z is Y) is true, 


which is valid again not because of the subject matter (since there is none in 
this abstract version) but because of the meanings of ‘all’, ‘is’ and ‘are’. 


To return to our formal system, it is the logical symbols (connectives and 
quantifiers) that will play a role similar to the English connecting words 
discussed above, while the arithmetical symbols will express the ‘subject matter’. 
Our definition of logical consequence is thus intended to capture arguments 
such as (1), (2) and (3) above, that is to say, arguments such that the truth of 
the conclusion (i in the definition) is guaranteed by the truth of the premises 
($,...., Ox) solely because of the (fixed) interpretation of the logical symbols, 
and does not depend upon any particular interpretation of the arithmetical 
symbols (the ‘subject matter’). 


We now describe the intended interpretation of the logical symbols. The rest of 
this unit will deal with the connectives, while Unit 6 will begin with a discussion 
of the quantifiers. 


(a) Conjunction 


We use the symbol & for conjunction. If $, y are formulas, then their 
conjunction is ($ & y). Clause 2 of our definition of a formula tells us that this 
is also a formula. 


The intended interpretation of the symbol & is explained by saying that: 
The formula ($ & y) is true if and only if both the formulas $ and w are true. 


Another way to explain this is by means of the following table: 


$ V (p&p) 


true true true 
true false false 
false true false 
false false false 


We call this the truth table for &. ‘True’ and ‘false’ are called truth values 
because we can think of them as values attained by the formulas ¢ and y. The 
above table completely specifies the interpretation of & because we have 
specified the truth value attained by ($ & wy) for all possible combinations of 
truth values attained by $ and by y. 


For technical reasons it is more convenient to use 1 and 0 as truth values. We 
use 1 for ‘true’ and 0 for ‘false’. Also, we usually write truth tables in an 
abbreviated form, so that the truth table for & will usually be written in the 
following way. 
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($ & y) 
1 ! 1 
1 0 0 
0 0 1 
0 0 0 
T 
the values of 
(6 & y) 


The symbol & corresponds to the informal use of ‘and’. 
(b) Negation 


We use — for negation. The negation of the formula ¢ is the formula — $. The 
intended interpretation of the symbol — is explained by saying that: 

The formula — $ is true if and only if the formula $ is false. 
Thus the truth table for — is: 


$ m^ = $ 

1 0 0 1 
or in abbreviated form: 

0 1 1 0 


The symbol — corresponds to the informal use of ‘not’. 


(c) Disjunction 


We use v for disjunction. The disjunction of the formulas ¢ and y is the 
formula ($ v y). The truth table for v is 


($ v v) 
1 1 1 
1 1 0 
0 1 1 
0 0 0 


Thus the intended interpretation of v is explained by saying that: 


The formula ($ v ) is true if and only if either $ is true or y is true or 
they are both true. 


In other words ($ v v) is false if and only if $ is false and w is false. 


The symbol v corresponds to the informal use of *or' that suggests alternatives 
which are not necessarily mutually exclusive. 


(d) Implication 


We use > for implication. If $, y are formulas, the implication with antecedent 
$ and consequent y is the formula ($ > y). The truth table for > is 
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1 1 1 
1 0 0 
0 1 1 
0 1 0 


The intended interpretation of — can thus be explained by saying that: 


The formula (p — y) is true if and only if either $ is false or (@ is true and 
V is true). 


Perhaps it is clearer to say (p > y) is false if $ is true and y is false, and 

($ +) is true otherwise. The formal symbol — is intended to correspond to the 
informal notion ‘implies’ or ‘if... then...". If it seems strange that we define 

(6 — V) to be true when ¢ is false (regardless of the truth value of y), the 
following example should help to explain this. 


Consider the statement ‘for all integers n, if n > 2 then n? > 4’. This is typical of 
how the words ‘if... then...’ are used in mathematics and, of course, one 
immediately accepts this statement as true. But this forces us to accept the 
statements ‘if —3 > 2 then 9 > 4' (putting n = —3) and if 2 > 2 then 4 > 4 
(putting n — 2) as true, and in both cases the antecedent is false. In the first 
case, the consequent (‘9 > 4’) is true and in the second case the consequent 

(4 > 4) is false. This illustrates why we have defined the third and fourth lines 
in the above truth table as we have. 


(e) Bi-implication 


We use for bi-implication. 
The intended interpretation of <> can be explained by saying that: 

The formula (p — w) is true if and only if $ and y have the same truth value. 
The truth table for — is 


(ó $3 V) 
1 


1 


1 1 
0 0 
0 

1 0 


1 
0 
0 


The symbol <— corresponds to the informal notion of ‘if and only if". 


Using the basic truth tables, we can work out truth tables for more complicated 
formulas built up using the connectives. Our method is as follows. Suppose we 
have a formula 0 built up from some of its subformulas, $,,..., ,, using only 
connectives. To get one line of the truth table for 0, we assign a truth value to 
each of $,,..., $,, and progressively work out the truth values of all the larger 
subformulas of 0 corresponding to this assignment of truth values by using the 
rules given in the tables in (a) to (e). The order in which we deal with the 
subformulas corresponds to the way in which 0 is built up as a formula from 
$,,..., y- Finally, we arrive at a truth value for 0 (which is by definition a 
subformula of itself). We then repeat this process for all the possible 
assignments of truth values to $,,..., $, to obtain the truth table. 
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Consider the formula (—($ v v) 5 ($ & y)), where $, y are any given formulas. 
(They will, of course, be subformulas of the main formula.) We can work out its 
truth table as follows: 


$ Y vy -evy (&p)  (-(vu)o(6&yy) 
1 1 1 0 1 1 
1 0 1 0 0 1 
0 1 1 0 0 1 
0 0 0 1 0 0 


The headings of the columns correspond to the subformulas obtained when 
building up (—($ v V)  ($ & W)) from $ and y. The first two columns list all 
possible combinations of truth values that can be attained by $, y. The third 
column computes the corresponding truth values of ($ v y) according to the 
table in (c) above. In the fourth column we have applied the table in (b) to the 
truth values in the third column, which therefore gives us the corresponding 
truth values of — (p v y). The fifth column is computed using the table in (a) 
applied to the first two columns. Finally, the sixth column is worked out by 
applying the table in (d) to the fourth and fifth columns, which therefore gives 
us the truth values of (— ($ v y)  ($ & y)), as required. 


Thus the table tells us that, for example, when is true and y is false (i.e. the 
second row of truth values), then the entire formula is true. 


Note that on each line of the truth table in Example 1, the truth value of the 
formula is completely determined by the values given to $ and y and the rules 
in tables (a) to (e). This is guaranteed by the strict way in which we insisted 

on the brackets in our definition of a formula. If we had been sloppy in this 
definition, something like (p & y v 0) would not have had a well-defined truth 
table, as the order of precedence between & and v would affect the truth values 
taken by the ‘formula’. 


We could write down the truth table in Example 1 succinctly as follows: 


C 6 v y > (6 & v) 


Ooo TT 4d. X d-4 ud 
0 1 1 O 1! 1! O0 0 
0 0 1 1 1 0 O 1 


1 0 0 0 000 0 


C0000000 


The circled numbers indicate the order in which the columns were filled in. 
They are not part of the truth table and would usually be left out. The values in 
column (4) tell us the truth value of the entire formula corresponding to the 
values of $, y as given in the columns labelled (1). 


The truth table above has 4 lines, corresponding to the 4 — 2? possible 
combinations of truth values for the two subformulas $ and y. For a formula 
built up from 3 different subformulas using only the connectives, there would be 
2? — 8 possible combinations and hence the truth table would have 8 lines, and 
so on. (Note that the order in which one records the truth values of a formula 
corresponding to the different combinations of truth values of its subformulas in 
a truth table does not matter. All that matters is that all possible combinations 
are dealt with in the table.) 
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AMPLE 2 Let us calculate the truth values of the formula ((—$ & y) <— x) for all possible 
truth values of its subformulas $, y and y. These values may be read from the 
following truth table, which we leave you to check. 


$ y X -—ó (-é$&y) | ((-$&y)e x) 
1 1 1 0 0 0 
1 1 0 0 0 1 
1 0 1 0 0 0 
1 0 0 0 0 1 
0 1 1 1 1 1 
0 1 0 1 1 0 
0 0 1 1 0 0 
0 0 0 1 0 1 
Or, in abbreviated form: 

(C 96 & Wa x 

0. 1 0. T. 0 1 

0 1 90 L 1 9 

0 £ 0 0 © 1 

0.1 0 0 1| O 

| G Loo bod 

10 1 1 0 0 

1 0 0 @ O0 1 

1.0 0 O0 1 Q 

000000 


PROBLEM 1 Work out the truth tables of the following formulas. 
(i) (($&y)&py) 
(i) (0$) 9) 
(iii) (6 — 4) 
(iv) (-@ v V) — x) 
PROBLEM 2 Let 0 denote the following formula: 
(((xo (xo + x,) 2 6 > x, = 0°) & (Exo (xo + X,) 2 0 v Vx, x, = x4) 
> (x, 20. v Vx, x, = x;)). 
Let $, y, x denote the formulas 3x, (x9 + x,) = 0, x, = 0, Vx4 x, = x, 
respectively. Check that $, y, x are subformulas of 0, and that 0 takes the truth 
value 1, no matter which truth values are given to $, V and y. 
PROBLEM 3 Show that the formula 0 given by 
(Vxo Xp =X, > (—3x; (x, + 0") =x, > (Ax, (x, + 0) = x, > x, = 0'))) 
has truth value 1, under all interpretations of the symbols. 


(As you do not yet know how to find the truth value of formulas like 
Vx Xo = x, under an interpretation of the non-logical symbols, you will need to 
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identify subformulas of 0 such that 0 is built up from the subformulas using 
only connectives, i.e. not using quantifiers, and then construct an appropriate 
truth table.) 


i de c Wd e g o Rb x4 8 
Tom. do kd of Lh T 
t Gd. dX 09 <6 L OQ 0 T 1 
10 0 0 1| © 1 "C Uy" 
100 0 0 01 000 
oo 1 0 1 00000 
0.0 1 0 0 
0 0 Q0 O f 
0 0 0 0 0 
0000/0 

(iii) ———————— (iv) 

Ga p (- d$ 34-9 

L dX | G- 3 L- Ot d 

Oo w^ Q 0. 1 1d 1 1 Q9 

Oo ORD, 0 Lt 0 oO 1 
D I i D i d 
0 0 1 1 0 41 
0 0 1 1 1 O0 
1i dg 00O f 1 
1 0 0 0 0 0 
óo0ooooonm 


SOLUTION 2 Either by using the tree analysis, or by inspection, we see that $, Y, y are 
subformulas of 0 and that 0 may be written as 


((9 V) & (6 v x) ^ (v v x). 


We thus have the following truth table for 0. 


(6 59) & (vy) > Wy yw) 
127 L LIL i Lia 
DS 4 Tra À C add 
iue? $9 x11 £s wii 
100 d 110 1 000 
ri i 81% X Wet 
ri E woo 1* TTO 
Di. d ogi i Oii 
010 0 000 1 000 
000 © OOO © OOO 
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From column 4 we see that @ takes the truth value 1 for all possible truth 
values of its subformulas $, y and y. B 


Let ¢, y and x denote the formulas Vx, x, = x,, 3x, (x, + 0") = x,, and 

x, = 0" respectively. Then ¢, y and y are all subformulas of 6, and 6 is built up 
from 6, y and y by use of only connectives. In fact, 0 is then given by 

(6 > (—V > (V  x))) and has the following truth table. 


(5 y ^ (v2) 


11 0 1 I i t 1 
11 0 L 1 100 
L 1 Oui fs 0 11 
11 10 1 010 
0 1 OL 1 1 1 1 
0 1 0 L 1 100 
0 1 10 1 0 11 
0 1 170. 1 010 


Thus 0 is true under all interpretations. Note that the success of this method 
depends on an apt choice of subformulas of 0. For instance, if we had chosen 
$*, W* and x* to be Vx, x = x,, —3x; (x, + 0") = x,, and 

(Ax. (x; + 0) = x, > x, = 0") respectively, then 0 would be given by 

(p* > (w* > x*)) and would have the following truth table. 


o > (y* > p) 


L t 1 dL 14 
1 0 1 0 ^ 
Lo xh. er Ge d 
Ll T 0 1 O0 
© £ T i A 
0 1 10 0 0 
0 1 0 1 1 
0 1 0 i Q 


This would seem to suggest that 0 is not true under all interpretations. 
However, this result occurs only because the subformulas chosen, w* and x* in 
particular, are inter-related—in a sense, they are too large. In fact, the one line 
in the second table on which 0 appears to obtain the truth value 0 cannot be 
achieved under any interpretation, as the truth values of y* and y* are 
interdependent in such a way that y* can never take the value 0 when * takes 
the value 1 (as y* is —w and y* is (V > y). B 


The property of always taking the truth value 1, possessed by the formulas 
described in Problems 2 and 3 above, is of such importance to us in formulating 
our rules of proof that we introduce the following definition. 


Suppose ¢ is a formula with subformulas y,,..., y, such that $ may be written 
in terms of y/,,..., Yy using only the logical connectives. Suppose further that ¢ 
takes the truth value 1 (i.e. true) no matter what truth values are given to its 
subformulas w,,...,W,- Then $ is called a tautology. A 
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For example Solution 2 above shows that the formula @ is a tautology. Also, 
Solution 1(iii) shows that the formula (¢ «<— @) is a tautology. 


As the remarks at the end of Solution 3 above show, if we do not make an 
appropriate choice of subformulas, we may fail to detect that a formula ¢ is a 
tautology when a different choice would have revealed this fact. The safest thing 
is to analyse ¢ into subformulas y,,... , V, which are as simple as possible 
subject to the necessary condition that $ can be written in terms of Vi,... , V, 
using only the connectives (and thus not using the quantifiers). The resulting 
truth table will then tell us quite definitely whether or not $ is a tautology. 


Now suppose ¢,,...,, are any formulas and y is any formula. We say that y 
is a tautological consequence of $,,..., $ if the formula 


((---((P, & bz) & 0)... & $,) ^ V) (*) 


is a tautology. 


(We hope that it is clear what we mean by the formula (+). For k = 1, it is the 


formula ($, > V); for k = 2, (($, & $2) > V); for k = 3, (6, & $2) & 63) ^ Y), 
and soon.) A 


For example, let ¢, be (Ixo (xo + x,) =0 > x, = 0°), let $, be 

(Axo (xo + x1) =0 v Vx; x, = x3), and let y be (x, =0 v Vx, x, = x3). 
Then Solution 2 above shows that (($, & $;) > V) is a tautology, so that 
(x; =0 v Vx, x, = x3) is a tautological consequence of 

(Axo (xo + x1) 2 0 > x, = 0), (Axo (xo x1) 2 0 v Vx4 x, = x3). 


It will be important for later work that a Turing machine exists that can decide 
whether or not a given formula is a tautological consequence of a given set of 
formulas. Firstly, we hope that it is clear that (in principle, at least) one could 
programme a Turing machine to check whether a formula written on its tape is 
a tautology. (We essentially require a machine that computes the subformulas of 
a formula. It is then just a matter of assigning all possible truth values to 
subformulas and using the truth table method to check whether the original 
formula always takes the value 1.) We now programme a machine such that if a 
sequence $,,... , y, Y, is given as input, it writes out the formula 

(C. (0; & $5) &... & $x) > V) and then checks if it is a tautology. If it is, then y 
is a tautological consequence of $,,..., p If it is not, then y is not a 
tautological consequence of $,,...,$,. . 


This is important. You should read the solution even if you do not have time to 
attempt it yourself. 


Show that if y is a tautological consequence of the formulas $,,..., $, then it is 
a logical consequence of these formulas. (Trying the case k — 1 first might help. 
Remember that ‘ is a logical consequence of ¢,,...,@,’ means whenever 
$,---,, are interpreted as being true, then so is y.) 


We first do the case k — 1. 


Suppose, then, that y is a tautological consequence of ¢,. Thus ($, > V) is a 
tautology. 


We must show that y is a logical consequence of $,. So suppose we have an 
interpretation of the non-logical symbols which makes $, true. We must show 
that this interpretation makes y true. However, if i were false (under this 
interpretation), (6, > V) would also be false by the truth table for implication 
(table in (d) above) and this contradicts the fact that (¢, > v) is a tautology 
(since clearly a tautology is true under all interpretations). This contradiction 
shows that y cannot be false, i.e. it is true, as required. 
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The general case requires only the following addition. Suppose that we have an 
interpretation which makes all the formulas ¢,,...,, true. Then, by the truth 
table for conjunction it must make (¢, & p) true. Hence it must make 

(($, & $7) & 3) true. Continuing, we see that is must also make the formula 
(... (6; & $5) &... & $) true. The proof is now similar to the above, 

using (... (pı & hz) &...& $,) in place of $,. B 


The Tautology Rule and Conditional Proof 


Recall that we want the rules of deduction of our formal systems (or logical 
rules, as we shall usually call them) to be comprehensive enough so that we can 
formalize as many informal arguments as possible. However, there are two 
restrictions on the rules we want to introduce, and we discuss this point now. 


Firstly, we are obviously trying to formalize correct informal arguments, 
deductions that can lead us only from true statements to true statements. Now 
this will be guaranteed, according to our discussion in Section 5.3, provided we 
ensure that our rules of deduction are logically valid. In other words, when a 
rule of deduction tells us that we may introduce a certain formula into a formal 
proof depending on certain previously introduced formulas and assumptions, 
this formula must be a logical consequence of those assumptions and previous 
formulas. 


Notice that this condition is trivially satisfied by the Rule of Assumptions 
introduced in Section 5.2. For that rule allows us to introduce a formula, 4 say, 
on a line in a proof only provided we use $ itself as the assumption on that 
line, and $ is clearly a logical consequence of ¢. (If you look again at the 
definition of logical consequence in Section 5.3, we hope you will accept this 
latter statement, even though we have not yet explained an interpretation of the 
non-logical symbols.) 


Our second restriction on formal proofs comes from the observation that any 
informal proof of a theorem offered by a mathematician must be capable of 
being checked by (in principle) anyone else. Of course, this is not to say that 
there need be a general procedure for producing the proof—you may recall from 
the first cassette tape that whether or not a procedure exists for producing 
proofs of mathematical statements is essentially Leibniz's question, and we shall 
return to this later—but merely one that will routinely check whether or not a 
purported proof is, in fact, a proof. 


We incorporate this property into our formal system by designing each of our 
logical rules in such a way that it is obvious that there is an algorithm (i.e. a 
Turing machine) that can check whether or not a given formula can be 
immediately deduced from other given formulas using that rule. It will thus 
follow that there is a Turing machine that can check whether or not a given 
sequence of formulas constitutes a formal proof. 


We now specify the second logical rule of our formal system and then say why 
it satisfies the two restrictions stated above, before giving some examples of its 
use. 


The Tautology Rule (Taut) 

If the formulas $,,..., $, occur in a formal proof and the formula y is a 
tautological consequence of ¢,,...,,, then on any line subsequent to the lines 
on which $,,...,$, appear we may introduce the formula yy. The assumptions 
on which y depends are defined to be all the assumptions on which $,,..., 6, 
depend, and this must be indicated on the left of the line on which y is 
introduced. A 
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By Problem 4 of Section 5.3, the condition that w is a tautological consequence 
of $,,..., $, guarantees that y is a logical consequence of $,,..., $,, and hence 
the Tautology Rule is logically valid. Also, the rule specifies that y may be 
immediately deduced from ¢,,...,¢, if and only if y is a tautological 
consequence of #,,...,@, and we know that there is a Turing machine that can 
check this latter condition. So both our restrictions are satisfied by this rule. 


Here is an example of a formal proof in which the Tautology Rule is used: 


1 (1) (3x, (xo + x,) 20 > x, =0') Ass 
2 (2) (3xo (Xp + x,) 2 0 v Vx, x, = xj) Ass 
1,2 (3) (x; =0 v Vx, x, = x3) Taut, (1), (2) 


The annotation on the right of line (3) indicates that we have used the 
Tautology Rule to derive the formula on line (3) from the formulas on lines (1) 
and (2). Thus the assumptions in force on line (3) are all those in force on lines 
(1) and (2), namely the formulas numbered 1 and 2. This is indicated by the 
annotation on the left of the line number. That this is a correct use of the 
Tautology Rule depends on the fact that the formula 


((Gxo (xo + x,) 2 0 > x, —0') & (Axy (xo + x,) 20 v Yx, x; = X3)) 
> (x, =0 v Vx, x, =x;)) 
is a tautology, and this we have already checked in Problem 2 of Section 5.3. 


The above table thus constitutes a formal proof of the formula on line (3), 
namely (x, = 0" v Vx; x, = xs), depending on the assumptions in force on line 
(3), namely the formulas on lines (1) and (2), ie. (3x9 (xo + x) = 0— x, =0') 
and (Axo (xo + x1) 2 0 v Vx4 x, = x3). 


We mention in passing that an informal version of the Tautology Rule was used 
in the informal proof (third version) given in Section 5.2. For consider the step 
made at line (11). Suppose the formula $, corresponds to the informal assertion 
*n^ is even’ and $, corresponds to ‘n? is odd’—-we have not yet, of course, 
explained exactly what this means, but this does not matter for the moment: it 
is merely the form of the deduction that we are illustrating. Since it is the 
symbol & of our formal language that corresponds to the English word ‘and’, it 
is the formula ($, & $;) that will correspond to the informal assertion ‘n? is 
even and n? is odd’. Now ((¢, & $2) > (6, & $;)) is a tautology (as you can 
easily check), so we have indeed applied the Tautology Rule at line (11) (with 

k — 2 and y = ($, &d,)). 


Our next logical rule also corresponds to an informal one used in the informal 
proof of Section 5.2, namely the one used at line (14), where we incorporated an 
assumption into the assertion by use of the word ‘implies’. Since it is the symbol 
— that corresponds to the word ‘implies’, we obtain our third rule, which is 
called Conditional Proof, as follows. 


Conditional Proof (CP) 

If a formula, v say, occurs on a line in a formal proof, and a formula, $ say, 
occurs amongst the assumptions in force on that line, then on any subsequent 
line we may introduce the formula (p — y). The assumptions on which ($ — y) 
depends, which must be written to the left of (@ > y), are all those on which y 
depends except for 9. A 


To see that this rule is logically valid, we must show that if y is a logical 
consequence of $, ¢,,...,@, (where these are all the assumptions appearing to 
the left of y), then (9 > y) is a logical consequence of $,,..., $x This will 
clearly demonstrate that the rule CP can lead only from logically valid lines in a 
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proof to logically valid lines. So suppose that the formulas $,,..., $, are all true 
under some interpretation of the non-logical symbols—again, it does not matter 
exactly what this means since it is only truth tables for the connectives that are 
needed here. We must show that (¢ y) is true. Suppose it is false. Then by the 
truth table for +, we must have ¢ true and y false. (This is the only way 

($ > V) can be false.) But now ¢, $,... , $ are all true and y is false, which 
contradicts the fact that y is a logical consequence of ¢, $,,..., $,. Thus 

(Ó — Ww) is true, as required. 


CP also meets our second restriction on logical rules, since to check whether it 
has been used correctly on a given line in a given proof, a machine has to check 
merely whether the formula on that line is of the form ($ > y) and take note of 
the assumptions on that line—say they are $,,..., $,. The machine then checks 
all previous lines in the proof until it finds the formula y with assumptions 
$1... 0, $. If it does not find such a line, CP has not been applied correctly; 
otherwise it has. 


We give a formal proof of the formula 


(xo =x; > (Xo =X, v x, =0)) 
depending on no assumptions at all. 


1 (1) No =X Ass 
1 (2) (x9 =x, v x, =0) Taut, (1) 
(3) (Xo = x, > (Xp — x, v x, = 0)) CP, (2) 


The use of the Tautology Rule on line (2) is justified since 

(xo = x, > (xo = x, V x, = 0)) is a tautology, as you can easily check by 
calling the subformulas xo = x, and x, = 0, 0 and y respectively, so that the 
formula becomes (0 — (0 v x)). The use of CP on line (3) is justified as follows. 
On line (2) the formula (x9 = x, v x, = 0) appears with the assumption 

Xo = x4. CP tells us that we may derive (xy = x; > (xo =X, v x, = 0)), which 
will depend on those assumptions used to derive (xo = x, v x, = 0), other than 
Xo — x, itself. But there are no such assumptions. Hence on line (3) we write 
nothing to the left of the line number, and CP, (2) to the right of the formula to 
show that CP has been used to deduce the formula on line (3) from line (2). 


In this example we show that if $, y are any formulas, then there is a formal 
proof of the formula (— — 4) depending on the assumption y. 


1 (1) y Ass 

2 (2) —y Ass 

1,2 (3) [] Taut, (1), (2) 
1 (4) (-y > 4) CP, (3) 


The use of the Tautology Rule on line (3) is justified since (V & —wy) > ¢) isa 
tautology (as you can easily check) and, as dictated by the rule, the assumptions 
on which $ depends are all those on which y, —w depend, and we have 
indicated these to the left of line (3). Now the assumptions on line (3) include 
the formula — y (since the number 2 appears on the left), so CP allows us to 
introduce the formula (— > $) on any subsequent line, provided we maintain 
all the assumptions of line (3) except for — y, and this we have done on line (4). 


Here is a formal proof in which the rule CP is applied twice. As in Example 3, 
$, y are any formulas, and we give a formal proof of the formula 
(ġ > (V > (b & v))) depending on no assumptions. 


1 (1) ó Ass 
2 (2) y Ass 
1,2 (3) (Ó & y) Taut, (1), Q) 
1 (4) (V > (6 & )) CP, (3) 
(5) (6 > (V > (6 & y) CP, (4) 
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We have used on line (3) the fact that ((¢ & y) > ($ & y)) is a tautology. On 
line (4) we have used CP to transfer the formula y from the assumptions of line 
(3), and on line (5) we have used CP to transfer the formula $ from the 
assumptions of line (4). Thus we have given a formal proof of the formula 

($ > (V > ($ & W))) depending on no assumptions. 


The examples above illustrate an important point about the strategy used for 
finding formal proofs. When you are required to prove a formula of the form 

($ > V), add the formula ¢ to your list of assumptions and then prove y. Then 
the rule CP permits you to derive (p > v) from your original assumptions. 
You will see more examples of this strategy in the next unit. 


In Example 4 we effectively used this strategy twice. To prove 

($ > (V — (p & y))) from no assumptions, we first added ¢ to our list of 
assumptions and set out to prove (i — (@ & w)). But then we used the strategy 
a second time, adding y to our list of assumptions (to get the list $, y), and 
tried to prove (ó & y) from these assumptions. We duly completed this 

proof, and CP used twice gave the proof of the required formula. 


The following are incomplete formal proofs because the assumption numbers 
are missing. Fill in these missing numbers and where the tautology rule has 
been applied, state which tautologies have been used. (4, y, y are any formulas.) 


(i) 1 (1) y Ass 
a (2) Q Ass 
ı (3) (Pp v y) Taut, (1) 
iv (4) (6 & y) Taut, (1), Q) 
ie (5) ($ v V) & (6 & y)) Taut, (3), (4) 
2 (6) V> v V)&(o&vy)) CP, (5) 
(i) (1) (ov x) Ass 
Q) aA Ass 
(3) $ Taut, (1), (2) 
(4) V Ass 
(5) (6 & y) Taut, (3), (4) 
(6) (=x ^ (6 & y)) CP, (5) 
(7) (x v (6 & y)) Taut, (6) 
(8) (V > (x v (6 & y) CP, (7) 


(i) Write down a formal proof of the formula —($ > y) depending on the 
assumptions $, —w. 


(ii) How would you turn the proof produced for part (i) into a formal proof of 
the formula (p > (—y > —($ — ))) depending on no assumptions? 


Write down a formal proof of the formula ($ > ((@ > y) > y)) depending on 
no assumptions, using the fact that ((6 & (6 > v)) > y) is a tautology. 


(i) The assumption numbers are: 
1 on line (1); 
2 on line (2); 
1 on line (3), where the tautology (W — ($ v w)) has been used; 


1, 2 on line (4), where the tautology ((¢ & y) > (p & w)) has been used; 


1, 2 on line (5), where the tautology 
(CO V V) & (6 & W) > (6 v v) & (p & W))) has been used; 
2 on line (6). 
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(ii) The assumption numbers are: 
1 on line (1); 
2 on line (2); 
1, 2 on line (3), where the tautology (((¢ v y)& — x) — ¢) has been used; 
4 on line (4); 
1, 2, 4 on line (5), where the tautology (($ & y) > ($ & W)) has been 
used; 
1, 4 on line (6); 
1, 4 on line (7), where the tautology ((—x > ($ & V)) > (x v (6 & W)) 
has been used; 
1 on line (8). MI 
(i) 1 (1) $ Ass 
2 (2) —wy Ass 
1,2 (3) —(ó > v) Taut, (1), (2) 


Tautology used in line (3): ((@ & —w) > —($ > W)). There are other 
possible correct proofs. 


(ii) All that is needed is two uses of CP. For the proof given in the solution to 
part (i) above, we just add the lines: 


1 (4) (-y > -(6 > y) CP, (3) 
(5) (6 ^ (-W > -(6 5) CP, (4) WM 

1 (1) o Ass 

2 Q) ($ > y) Ass 

1,2 (3) y Taut, (1), (2) . 

1 (4) ($ — V) ^ v) CP, (3) 


6) (65($ov)5v)  CP,(4 E 


This concludes the formal rules governing the connectives. In the next unit we 
shall study the variables and quantifiers in more detail and explain the rules 
governing them. We shall then be able to produce much more interesting formal 
proofs. 


Objectives of Unit 5 


We list those things on which we may set assessment questions to test your 
understanding of the unit. After working through the unit you should be able 
to: 


(i) recall the definitions of a term, an atomic formula and a formula of our 
formal language; 


(ii) ^ determine whether a given sequence of symbols is a term, an atomic 
formula, or a formula of our formal language; 


(ili) find all the subformulas of a given formula; 


(iv) write out a truth table for a given formula, and determine whether a given 
formula is a tautological consequence of other given formulas; 


(v) | recall what each of the rules Ass, Taut, and CP says; 


(vi) check a purported formal proof to see whether or not the uses of these 
rules in it are legitimate; 


(vii) construct simple formal proofs using these rules. 
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Appendix: A Turing Machine for Terms 


The following material is optional and non-assessed. 


We wish to devise a Turing machine that will recognize whether or not a given 
string of our basic symbols (i.e. those symbols listed in Section 5.1) is a term of 
our formal language. As we have mentioned already, it will be important for 
later work to know that such a machine exists, although the exact details of its 
machine table will be of no consequence. Hence we merely give an outline of 
how such a machine could work. 


As a Turing machine can cope with only a finite list of symbols, we shall adopt the 
convention, mentioned in Section 5.1, of representing the variable x, by 
X m... „ Le. X With a subscript composed of n primes. 


m . 
n 
The idea is to mimic the analysis of terms described above by having our 
machine break down a given string to see whether it was built up from variables 
and the zero symbol using clause (2) in the definition of a term. To help us, we 
shall need the following definition. 


If « is a term other than a variable or the zero symbol, the leading symbol 
occurrence in t (Ls.o. in c, for short) is defined to be the last occurrence of either 
*,* or ' used in building up t using clause (2) of the definition of a term. In 
other words, the l.s.o. in t is the occurrence of +, or’ that would be analysed 
first in the term analysis previously described. A 


Thus, for example, the L.s.o. in (0 + (x, + x,,)) is the left-most occurrence of the 
symbol +, while the L.s.o. in (0 + x;)' is the (only) occurrence of the symbol ’. 


How could a Turing machine find the leading symbol occurrence in a term that 
is written on its tape? If the term ends with the successor symbol, then clearly 
this must be the L.s.o. in the term and it is a simple matter to programme a 
Turing machine to detect this. The difficulty occurs when the L.s.o. is an 
occurrence of + or - buried somewhere in the middle of the term. In this case, 
we base our algorithm on the following observation. Firstly, given any 
occurrence of the symbol + or - in a term c, let L denote the number of left- 
hand brackets, i.e. (s, occurring to the left of this occurrence and let R denote 
the number of right-hand brackets, i.e. )s, occurring to the left of this 
occurrence. For example, for the first occurrence of the symbol + in the term 
((0 + x,) + x,,) we have L= 2, R = 0, and for the second occurrence, L= 2, 

R = 1. Then one can show that an occurrence of + or - in a term is the 1.s.0. of 
that term if and only if R + 1 = L. We do not bother to give a proof of this 
fact, although looking at some examples should make it seem plausible. Thus 
consider the term (((0- x,)-x,)'" + (x,, + 0°). This term contains two 
occurrences of the symbol - followed by two occurrences of the symbol +. The 
corresponding numbers L, R are (from left to right): L= 3, R = 0; L=3, R=1; 
L=3,R=2; L= 4, R=2. The only pair here which satisfies R + 1 = L is 

L= 3, R = 2, so the result we have just stated predicts that the first occurrence 
of the symbol + must be the 1.s.o. in this term, and this is easily confirmed by 
the usual analysis. 


Now clearly a Turing machine can be devised to compute the numbers L, R for 
each occurrence of the symbols +, + in a string of symbols written on its tape, 
and to check whether exactly one of these pairs satisfies R + 1 = L. Hence we 
have a machine that can locate the l.s.0., as required. 
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It is now an easy matter to devise a Turing machine that can recognize whether 
or not a string of symbols written on its tape is a term. ('Recognize' here means 
the machine will halt with, say, a single 1 on its tape if the string is a term and 
halt with a blank tape otherwise.) Such a machine first looks for the 1.s.0. using 
the algorithm just described. If this is the symbol * (located at the end of the 
string), then the machine deletes this symbol and repeats the procedure with the 
remaining string. If the l.s.o. is the symbol + or * then the machine checks that 
the string begins with a left bracket, which it then deletes, and ends with a right 
bracket, which it also deletes, and repeats this entire procedure on both the 
string to the left and the string to the right of the Ls.o. When a string with no 
occurrences of symbols +, - or ' is reached, the machine checks that this is 
either the zero symbol or a variable, i.e. a string of the form x,, ... , If, at any 
stage, this procedure breaks down (e.g. because the machine finds a string with 
no, or two or more, occurrences of + or - which satisfy R + 1 = L), then the 
original string could not have been a term. Otherwise, the original string was a 
term. 


Let us apply this algorithm to the string ((x,* x,) + 0)’. The Ls.o. here is the 
symbol ’, so this is deleted to obtain ((x,+x,) + 0). Since this string does not end 
with the symbol ’ we apply the ‘counting brackets’ argument to each occurrence 
of - and +. For the only occurrence of + we have L= 2, R = 0, and for the only 
occurrence of + we have L= 2, R = 1. Hence there is indeed exactly one 
occurrence of + or * such that R + 1 = L, namely, the only occurrence of +. 
Thus we check that the string begins with a ( and ends with a  ), delete these 
brackets, and then repeat the procedure on the strings (x,-x,) and 0. Now 0 is 
the zero symbol, so it remains only to apply the procedure to (x,+x,). The 
occurrence of - here certainly satisfies R + 1 = L (L= 1, R = 0), so we again 
check the outermost brackets, delete them, and reapply the procedure to each of 
the strings x, x,. But these are variables, so the algorithm is completed and the 
original string was indeed a term. 


Consider now the string ((x,* x,, + x,) + 0). Since this does not end with the 
symbol ', we ‘count brackets’ to obtain, for the occurrences of + and - (from 
left to right): L= 2, R20; L= 2, R= 0; L= 2, R = 1. Thus the l.s.o. is the 
second occurrence of + and, after checking and deleting the outermost 
brackets, we must repeat the procedure on the strings (x, x,, + x,) and 0. 
However, ‘counting brackets’ for occurrences of + and - in the first string here 
yields L— 1, R — 0 for both occurrences. Hence there is not a unique occurrence 
of + or satisfying R + 1 = L, so the algorithm halts at this point having 
revealed that the original string was not a term. 


As we have said already, we hope it is clear that we have given an algorithm for 
checking terms which could be used on a Turing machine, and we are not 
giving the machine table of such a machine. 
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Introduction 


In Unit 5 we described the language of number theory and introduced some of 

the logical rules of the corresponding formal system. We emphasized two key 

features of these rules: 

(a) there is an algorithm (Turing machine) to decide whether a given sequence 
of formulas is a formal proof from a given set of assumptions; and 

(b) the rules are logically valid; that is, if a formula, y say, occurs on a line in a 
formal proof depending on assumptions $,,..., $,, say, then any 
interpretation of the non-logical symbols which makes each of the formulas 
$,,..., 0, true also makes y true. 


We have not completely explained (b) since we have not yet told you what an 
interpretation of the non-logical symbols looks like, but we did explain the 
interpretation of the connectives (using truth tables) which was sufficient to 
establish the logical validity of the Tautology Rule and Conditional Proof. The 
Rule of Assumptions is trivially logically valid. 


In this unit we complete the description of our formal system by giving the 
logical rules for the quantifiers V and 3, and for the identity symbol —. 


The intended interpretation of these symbols should be clear. There are just two 
points worth noting. Firstly, although Vx is interpreted as 'for every x', this does 
not mean 'every x that exists' but only 'every x in the set being considered'; and 
when we give the interpretation we need to specify what this set is. So the 
formula Vx Vy (x+y) = (yx) can be interpreted as expressing the fact that 
multiplication of real numbers is commutative if we take the universal 
quantifiers as referring to the set of real numbers. But the same formula can 
also be interpreted as expressing the fact that multiplication of integers is 
commutative if we take the universal quantifiers as referring to the set of 
integers. The traditional terminology for the set of objects under consideration 
is the universe of discourse. Another term for this set is the domain of the 
interpretation and we shall follow BJ in using this expression. 


Thus when we want to give an interpretation of our symbols we need to 
specify which set is the domain of the interpretation. Then the existential 
quantifier 3x is interpreted as saying 'there is some x in the domain'. 


Secondly, the identity symbol in the formula t, = t, is interpreted as expressing 
the fact that the objects referred by t, and c, are equal. So, for example, with 
the standard arithmetical interpretation, the formula (0 - 0") = 0°" is 
interpreted as being true. The terms in this formula are different expressions, but 
with the usual interpretation of the arithmetical symbols they represent the 
same number, namely the number 6. 


We shall look further at the interpretation of the symbols in Unit 7. 


Just as the formulation of the Tautology Rule required an analysis of the 
subformulas of a given formula, so we shall have to investigate more deeply 
another aspect of the structure of formulas before we can formulate the 
quantifier rules. Namely, we shall begin by looking at the way variables occur in 
formulas. 


6.1 Free and Bound Variables 


In everyday mathematics variables are used in several different ways. Let us 
illustrate this with the following situation. Suppose we are given a set S, with 
two binary operations + and - defined on S. (Thus S might be the set of 
natural numbers, and the operations those of ordinary addition and 
multiplication, or $ might be the set of real numbers, or a set of matrices etc.) 
Now, there are many mathematical statements we could make about such a set- 
up, for example, ‘the operation + is commutative’, ‘the operation - is 
commutative’, ‘the operations + and - are distributive’. We can express these 
statements more formally using variables and the formal symbols + and, as, 


respectively: 
Vx Vy (x + y) = Y + x) (1) 
Vx Vy (x+y) = (y: x) Q) 
Vx Vy Wz (x*(y + z)) = (x+y) + (xz) (3) 
Consider also the statement: 
(xx) (yy) =1 (4) 


(where we are here supposing that S is, say, the set of real numbers). 


Do you see an essential difference in the use of the variables in (1), (2) and (3) 
from that in (4)? In (1), for example, the statement Vx Vy (x + y) = (y + x) is a 
statement about the operation + (namely it is asserting that + is commutative) 
and not about x or y, whereas the statement (4) is telling us something about x 
and y, namely, that the point (x, y) lies on the circle with centre (0,0) and radius 
1. The variables in (1), (2) and (3) are often called dummy variables. We shall 
also say that the occurrences of the variables in (1), (2) and (3) are bound 
occurrences, and the occurrences of the variables in (4) are free occurrences. 
(We shall see later that they are called free occurrences because we are free to 
make substitutions for these occurrences. In contrast we use ‘bound’ for the 
other occurrences.) 


Another way of looking at the uses of the variables in (1), (2), (3) and (4) which 
might help in distinguishing them is as follows. Ask yourself the question ‘is the 
formula true?' and note the information required for an answer. Thus, to answer 
‘is Vx Vy (x+y) = (y*x) true?', you need only know what kind of multiplication 
is intended to interpret the symbol -. If multiplication of real numbers is 
intended (as in our original example), the answer is ‘yes’. If multiplication of 
say, 2 x 2 matrices with real number entries is intended, the answer is ‘no’. 
However, in order to answer the question ‘is ((x*x) + (y*y)) = 1 true?’, you 
need not only information about which operations + and - are intended to be 
(and on which sets they are operating) but also you need to know what x and y 
are. This extra information required (i.e. the response ‘it depends on what x and 
y are’) distinguishes the occurrences of x and y in (4) as free occurrences from 
those in (2), where they are bound occurrences. 


The same formula can contain both free and bound occurrences of variables. For 
example, in 
Jy x= (y + y) (5) 


the occurrence of x is free, but the occurrences of y are all bound; the question 
‘is Jy x = (y + y) true?’ produces the response ‘it depends on what x is’ but not 
‘it depends on what y is’. For example, if we are told that the + symbol here is 
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referring to addition of positive integers, then the formula 3y x = (y + y) is true 
if x = 6 but false if x = 17. In other words, the formula (5) tells us something 
about x, but not about y. We could equally well express the same fact about x 
by 

3t x = (t+ t) 
in which the variable y does not occur. 


It is, of course, the presence of the quantifiers that converts free occurrences of 
variables into bound occurrences. Thus if we trace how a formula is built up from 
atomic formulas we can work out which variables are free and which are bound. 
Before we give an example, however, let us introduce the following convention. 


A variable has been defined as one of the symbols xo, x,, x»... . This precision 
was needed in order that a Turing machine could be constructed to recognize 
basic symbols and decide which sequences of them were terms, formulas etc. 
Now that this has been accomplished we shall err in favour of typographical 
convenience and clarity when writing down formulas. Thus we shall use x, y, z, 
t,... for variables. If you like, you can regard x, y, z, t,... as abbreviations 

for xo, X1, X2, X5,... . All that really matters is that they represent distinct 
variables. 


To return to the matter at hand we consider the usual analysis of the formula 
((y =0 v 3y x= (y + y) > Vz 3x (y + x)= z) 
It is as follows: 


(y—0 v 3y x = (Q + y)) > Vz dx (y+ x) =2) 


(y=0 v 3yx (y +y)) Vz 4x (y+x)=z 
| | 
y=0 3y x= (y +y) Jx (y+ x)=z 
|© (G 
x=(y+y) (y+x)=z 


We can look at this diagram in two ways. Reading from top to bottom it shows 
how the original formula can be broken down into its components. On the 
other hand, reading from bottom to top it shows how this formula is built up 
from atomic formulas. To distinguish the free and bound variables we look at 
the diagram in this second way. We have labelled the stages at which quantifiers 
are introduced. Each introduction of a quantifier binds all occurrences of 
precisely one variable, and these occurrences remain bound in the original 
formula at the top of the diagram. We have underlined all the bound 
occurrences of variables. Clearly, the ‘underlining process’ we have carried out 
here is purely mechanical, and hence it provides us with an algorithm for 
deciding whether or not a given occurrence of a variable in a formula is free or 
bound. Notice that we have been careful to say that occurrences of variables are 
free or bound, for, as this example shows, the same variable can occur free and 
bound (in different places) in the same formula. For consider the variable y in 
the formula we have just dealt with: 


(y —0 v dy x= Q + y) > Vz 3x (y + x) = z). 


T T. d T 
1 2 34 5 


Its first and fifth occurrences are free, whereas its second, third and fourth 
occurrences are bound. 


After some practice, it should be possible for you to distinguish between free and 
bound occurrences of variables without the need to actually write down the 
analysis of the formula. In the next section we shall see another use of this 
analysis. 
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Vx dy Yz (x + y) 2z v (7x20 v —-y=z)) 
The analysis is as follows: 


Vx dy Vz (x + y) oz 


dy Vz (x + y)=z v (-x-0 v —y=z)) 


G 


Vz ((x+y)=z v (-x=0 v —-y-2) 


®© 


(x y)—z v(-x-0 v -y-2) 


(x+y)=2z (-x=0v -y=z) 


x=0 yez 


Thus all occurrences of x, y and z in the above formula are bound 
occurrences. O 


(Remember that — is the negation symbol and not a ‘minus’ symbol, so that 
the formula —y = z should be read as ‘it is not the case that y equals z', rather 
than ‘minus y equals 2.) 


(i) Gy Ory) =x & It (x +t) =y) 
(i) 3y (Vy) 2 x & 3t (x + t) = y) 
Here are the analyses: 


à) Gy Wy) =x & 3t (x +t) =y) 
ay (yy) =x 3t (x +t) =y 
|© |® 
(yy) =x (x+t)=y 


Gi) — 3y(Q-y) = x & It (x + t) = y) 
lo 


((y*y) =x & 3t (x +t) = y) 
Q:y)=x 3t "re 


(xtt)-y 


These examples show how important bracketing can be. In (i), the first, second 
and third occurrences of y are bound, whereas the fourth occurrence is free. In 
(ii), all four occurrences of y are bound. In (i) and (ii) both occurrences of x are 
free and both occurrences of t are bound. O 


Notice that in Example 1 there are no free occurrences of any variable. 
Formulas with this property are called sentences. Thus a sentence is a formula 
in which all occurrences of variables are bound. 


In the following formulas, determine which occurrences of variables are free and 
which are bound. State which of the formulas are sentences. 


(i) Vx3yx-y 
(ii) (x-2yva3t(x*)-2y)vat(y*t)-x) 
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(iti) Gz (z: x) = yo Vy Gz (zy) = x > — dx (xx) = y) 
(iv) dx (x=y v x=y) 
(v) G@xx=y v x=y) 


(i) Both occurrences of x and y are bound. Since no other variables occur, the 
formula is a sentence. 


(ii) All occurrences of x and y are free, and all occurrences of t are bound. The 
formula is not a sentence. 
(iii) (Az (z-x) = y > Vy (3z (z-y) = x > —3x (x-x) = y) 


Iii L RLT. Í TOT T 
BBF F B BBB F BBB B 


Here F indicates a free occurrence of a variable and B a bound occurrence. 
The formula is not a sentence. 


(iv) Both occurrences of y are free; all three occurrences of x are bound. The 
formula is not a sentence. 


(v) The first and second occurrences of x are bound; both occurrences of y are 
free. The formula is not a sentence. MI 


The Universal Quantifier Elimination Rule 


We are now in a position to begin describing the formal rules for the 
quantifiers, and we start with the universal quantifier Y. We have two rules 
associated with this symbol: one for eliminating it from proofs and the other for 
introducing it into proofs. We first consider the elimination rule. 


Our method for devising the quantifier rules will be to look at how quantifiers 
are handled in informal mathematical arguments and to mirror this in our 
formal rules. So we begin by looking at some examples. Consider the following 
extract: 


‘From the identity x? — 1 = (x — 1) (x + 1) it follows that 

7? — 1 = (7 — 1)(7 + 1) and so is divisible by 8’. 
At first sight, there is no universal quantifier to be seen, but it must be 
remembered that in informal mathematics the symbol V is not often used and 
other methods are used to indicate that statements are universally true. In the 
example above, the author has used the word ‘identity’ to indicate that the 
equation which follows is true for all values (in the range considered) of the 
variable x. So the deduction in this passage, expressed more formally, is as 
follows. From 


Vx x? 12 (x — 1) (x +1) (1) 
we deduce that 
P-1=(7-1)(7 +1). (2) 


We can see that in going from (1) to (2) the universal quantifier V and the 
following variable x have been eliminated, and all the remaining occurrences of 
x have been replaced by occurrences of the symbol 7; the variable which 
expressed generality in (1) has been replaced by a symbol for a particular 
number. However, we are not obliged to replace the variable by a numeral; it 
could be replaced by a more complicated expression. For example, in an 
argument in trigonometry we might want to deduce from (1) that 


(sint)? — 1 = (sint — 1) (sint + 1). (3) 


So this time x has been replaced by sin t, and it is easy to imagine a situation 
where we might want to substitute even more complicated expressions for x. 
In general, the sort of expressions we might want to substitute for x will be 
those which can stand for numbers. Recall that in Unit 5 we called these 
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numerical expressions terms. So the rule we are looking for will be one which 
allows us to eliminate a universal quantifier and the following variable from the 
beginning of a formula and to replace all the remaining now free (but previously 
bound) occurrences of the variable by occurrences of some term. 


In order to be able to state this rule succinctly, it is convenient to introduce 
some notation. If @ is a formula, x a variable and t a term, then $(t/x) denotes 
the result of taking the formula $ and replacing all free occurrences of x by 
occurrences of the term t. 


(i) If @ is the formula 3y y = (x + x) then $(0/x) is the formula Jy y = (0 + 0) 
and $((x*z)/x) is the formula 3y y = ((x*z) + (x*2)). 
(i) If $ is the formula (Vy (x-y) = x — Vx (x+y) = x) then $(0'/x) is the 
formula 
(Vy (0 -y) 2 0 > Vx (x-y) =x) 
since we replace only free occurrences of x by O and the last three 


occurrences of x in $ are bound occurrences. For a similar reason, $(0/y) 
is the formula 


(Vy (x+y = x) > Vx (x-0') = x). 


In the following cases write down the formula $(t/x). 
() pis 3y ry) = Gc(x y») cis (z" + 0). 

(i) ¢ is (Ax (x:x)=y & x= (z + y)); ris. 

Gii) @ is 3x ((x-x) = y & x = (zy); tis0’. 

(iv) isy y= (x+ x); tisy’. 

(v) gis 3z (x +z)= (x:z); Tis x. 


(i) dy (yy) = (C + 0): (2 + 0) + y)) 
(ii) (dx(x:x)2y & 0 = (zy) 


Note that the first three occurrences of x in the formula $ are bound 
occurrences and so are not replaced. The fourth occurrence, however, is 
free and so we replace it by 0°. 


(ili) 3x ((x-x) = y & x = (z + y) 


Here all the occurrences of x are bound, so none get replaced and $(t/x) is 
the same as $. 


(iv) yy 20 +y’) 
(v) Az (x +z) = (x:z) 


Here z is the same as x, so replacing free occurrences of x by occurrences 
of x leaves the formula ¢ unaltered. W 


In terms of the notation we have just introduced, the formal rule we are aiming 
at will tell us that from a formula Vxó we can derive $(t/x). 


Before we state this rule, we need first to check that it meets our requirement of 
logical validity. At first sight, everything seems in order. If Vxó is true under 
some interpretation, then everything being considered must have the property 
specified by the formula 4. In particular, the object denoted by t has this 
property and so ¢(t/x) is true. This argument is almost correct, but it overlooks 
a technical complication which we shall explain below. In most practical 
applications, this complication will not cause any problems, and you should not 
let the bother it causes get in the way of your understanding of the essentials of 
what we are doing. However, for the sake of accuracy we need to discuss this 
technical difficulty now. 
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When we were discussing the difference between free and bound variables, we 
saw that a formula expresses only properties of the free variables occurring in it; 
the bound variables are just ‘dummies’ whose role is, for example, to express 
generality. The deduction from Vxó to $(c/x) will be valid only if (t/x) says 
the same thing about t as $ says about x, and things will go wrong if there are 
variables in t which become bound when we replace free occurrences of x by t 
in $. 

Look back at what happened in Problem 1 (iv) above. In that example, Yx was 
the formula 


Vx dy y = (x + x), (1) 
and $(t/x) the formula 
dIyy=(y' y) Q) 


The term t contains the variable y, and the occurrences of y in t become bound 
when we replace x by t in $. So we claim that things have gone wrong, for the 
following reason. It is not difficult to see that whereas formula (1) is true when 
we interpret + as the usual addition of natural numbers (under this 
interpretation it says that for each number there is another number which is 
twice the original number), formula (2) is false (where y’ is interpreted as the 
result of adding 1 to y). Since there is an interpretation which makes (1) true 
but (2) false, we cannot validly deduce (2) from (1). 


We see from this that the inference from Vx to $(t/x) is valid only provided no 
variable in t becomes bound when we replace free occurrences of x by t in @. It 
is convenient to have a shorthand expression to express this condition and so 
we make the following definition. 


We say that the term t may be freely substituted for the variable x in the 
formula ¢ if no variable in t becomes bound when we replace free occurrences 
of x in $ by occurrences of t. A 


(i) Let $ be Jy (y*y) = (x- (x + y)) and let t be (z^ + 0). The only variable in t is 
z, and since there are no quantifiers involving z in Q, this variable certainly does 
not become bound when we replace x by x in $. So t may be freely substituted 
for x in $. 

(i) Let $ be 3z (z+ y) = (x- (x + y)), and let t be (z + 0). t may not be freely 
substituted for x in ¢, since the variable z occurring in t becomes bound in the 
formula $(z/x), which is 3z (z+ y) = (= + 0)-((z" +0) + y). 

(ili) Let $ be (x 2 0' v dx y = x’) and let x be (x + y). ġ(t/x) is 
((x + y) 2 0 v 3x y = x')—remember we replace only free occurrences of 
x—Aand both the variables in q, x and y, are free in p(t/x) at the 
occurrences which arise from the replacement of x by t. So t may be freely 
substituted for x in ¢. 

However, t may not be freely substituted for y in 4. $(t/y) is the formula 
(x = 0" v 3x (x + y) = x") and the x in the term (x + y) is bound at the 
place where y has been replaced by t. 


In which of the following cases may the term « be freely substituted for the 
variable x in the formula $? 


(i) is(Gzz-y & H (t-t)=x); tis” y) 

(ii) $is3z(z—y' & Jt (t-t)=x); cis (z" +y). 

(ili) @ is (Yy 3z y = (z + z) > (at (t+t)=x v x=2)); Tis (y+ x). 
(iv) ¢ is Vy 3x (x x)—y v (x+x')=y); tis (vy x) 

(v) @is Vy (Ax (x+x)=y y-(x +x); tis x. 
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(i) qt may be freely substituted for x in $. The formula $«c/x) is 
(Ezz = y' & 3t (t-t) = (z" -y)) 
T 
and the variables y, z occurring in t remain free when x is replaced by t. 


(ii) t may not be freely substituted for x in $. ¢(t/x) is 
Jz (z = y' & 3t (t-t) = (z”' -+ y)) 
t 


bound 
and the variable z in t becomes bound when x is replaced by t. 
(iii) t may be freely substituted for x in $. ¢(t/x) is 
(Vy 3z y = (z + z) > Gt (t + t) 2 (y + x) v (y + x) o z) 
E AM rie 


and both the variables x, y occurring in t remain free when the two free 
occurrences of x in $ are replaced by t. 


(iv) t may be freely substituted for x in $. Notice that there are no free 
occurrences of x in ¢. So $(t/x) is identical with $ and, in a vacuous way, 
none of the variables in t become bound when we replace the free 
occurrences of x in ¢—there are none—by t. 


(v) t may be freely substituted for x in $. Since t is the same as x, $(t/x) is 
the same as $, so no problem arises. Bil 


We can now state our formal rule for the elimination of the universal quantifier. 
Since this rule applies whatever the quantified variable, in stating the rule we 
use v to stand for any of the variables of our language. 


Universal Quantifier Elimination Rule (UE) 

If the formula Yvo occurs on a certain line in a formal proof and « is a term 
which may be freely substituted for the variable v in $, then on any subsequent 
line we may derive the formula ¢(t/v), and this formula will depend on the same 
assumptions as did Vvd. A 


We cannot give any very interesting examples of the use of the rule UE until we 
have some other rules for the quantifiers at our disposal. Meanwhile, here is a 
fairly simple example of a formal proof which uses this rule twice. 


1 (1) Vx Vy (x + y) 2 (y +x) Ass 
1 (2 Wi ((z+x)+y)=(y+(@+x)) UE, (1) 
1 3) (@+x)+x)=(x+ (z+ x) UE, (2) 


If we call the formula on line (1) Vx@, so that $ is the formula 

Vy (x + y) = (y + x), then the formula on line (2) is @((z + x)/x), and the use of 
UE is legitimate since the term (z + x) may be freely substituted for x in ¢. 

If we call the formula on line (2) Yyy, so that w is the formula 

((z + x) + y) = (y + (z + x)), then the formula on line (3) is v(x/y) and again 
the use of rule UE is legitimate since the term x may be freely substituted for y 
in y. Indeed, as there are no quantifiers in y, any term may be freely substituted 
for y in y. 


Show that the formula (0’ + 0") = (0" + 0’) can be derived from the assumption 
Vx Vy (x + y) = (y + x). 


1 (1) Vx Vy (x - y)=(y +x) Ass 
1 (2) Vy (0 +y)=(y + 0’) UE, (1) 
1 (3) (0° +0") = (0" + 0°) UE, (2) HM 
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The Universal Quantifier Introduction Rule 


To find the appropriate rule for introducing universal quantifiers into proofs, we 
need to consider how universal statements are proved in mathematics. 


Consider, for example, the proof of the following theorem about groups. (Don’t 
worry if you are not familiar with group theory; the mathematical details of the 
proof are not important for our purposes.) 


Theorem Let G be a group. Then 
for all g, hin G, (gh) ! 2 h^!g^!. (*) 


Proof Take g, hin G. (h~*g~')(gh) = h^! (g ! g)h = h^ teh = h^ !h =e, where 
e is the identity element of G. Thus h^ !g^! is the inverse of gh, ie. 


(gh)! = hog"? (t) 
This completes the proof. Bil 


This proof establishes the universal statement (*) about all elements of the 
group G. We proved it by taking two elements g, h of G and showing that they 
satisfy the formula (+). Why does this enable us to claim that we have thereby 
proved the universal statement («) and hence that we have completed the proof 
of the theorem? The reason is that in deriving (f) we made no special 
assumptions about g and h. We used several properties of groups (without 
mentioning them explicitly) such as the associative law, but all we assumed 
about g and h was that they were elements of G. That is why the universal 
statement (x) follows from (t). 


You may have met the same idea in proofs of theorems in geometry. For 
example, to prove that every isosceles triangle has equal base angles, we take an 
isosceles triangle ABC and, making no further assumptions about it, deduce 
that its base angles are equal. Because we make no other assumptions about the 
triangle ABC, this entitles us to say that every isosceles triangle has equal base 
angles. 


Thus if we want to prove a universal statement Yvo, the standard method is to 
prove that $ is true without making special assumptions about v. It then follows 
that $ is true for every v being considered, that is, that Vv is true. 


We saw earlier that a formula tells us something about v if v occurs in it as a 
free variable. Thus in deriving $, none of the formulas used as assumptions 
must contain v as a free variable. This leads us to the following rule. 


Universal Quantifier Introduction Rule (UI) 

If the formula $ occurs on a line of a formal proof and the variable v does not 
occur free in any of the assumptions in force on this line, then on any 
subsequent line we may derive Vv, and this formula will depend on the same 
assumptions as did ¢. A 


1 (1) Vx Vy Vz (x + (y + z)) = ((x + y) + z) Ass 

1 (2) Vy Vz (x + (y + z)) = ((x + y) + 2) UE, (1) 
1 (3) Vz (x + (x + z)) = ((x + x) + z) UE, (2) 
1 (4) (x + (x + x)) = ((x + x) + x) UE, (2) 
1 (5) Vx (x + (x + x)) = ((x + x) + x) UI, (4) 


This example is typical, in the sense that we made several applications of the 
UE rule before we were ready to apply the UI rule. You will see that in this 
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example each time we used the UE rule we replaced the variable which is being 
eliminated by x. 


To see whether the use of UI on line (5) is legitimate, we need to look at the 
line from which line (5) is derived. The annotation at the right of this line tells 
us that line (5) is derived from line (4). So we need to look at those formulas 
which are in force as assumptions on line (4). In the example above, the only 
formula used as an assumption to derive line (4) is the formula on line (1). We 
see that the variable x has no free occurrences in this formula. So we may 
legitimately use the rule UI to derive from line (4) the formula obtained by 
prefixing Vx to the formula on that line. The rule UI then tells us that line (5) 
depends on exactly the same assumptions as does line (4). Note that x has free 
occurrences in the formula on line (4) but, as this formula is not used as an 
assumption, this fact is irrelevant. 


1 (1) Vx Vy (x + y) 2 (y + x) Ass 


1 (2) Vy (x +y) 2 (y + x) UE, (1) 
1 (3) (x+y)=(y+x) UEQ) 
1 (4) Vx (x + y) = (y + x) UI, (3) 


1 (5) Vy Vx (x + y) = (y + x) UL (4) 


On line (4) we use the rule UI to add the prefix Vx to the formula on line (3). 
So to see whether this is a legitimate use of UI we must check that the variable 
x does not occur free in the assumption formulas on which line (3) depends 
(here just the single formula on line (1)). Similarly, to see whether the use of UI 
on line (5) is legitimate, we must check that the variable y does not occur free in 
the formulas used as assumptions to derive line (4). Since, in fact, there are no 
free variables in the formula on line (1), it is easily seen that both uses of UI in 
this proof are legitimate. 


Show that the formula Vx ((x + x): x) = ((x*x) + (x*x)) can be derived from 
the assumption Vx Vy Wz ((x + y): z) = ((x*z) + (v*z)). 


Show that the formula Vx (x + 0) = (0 + x) can be derived from the assumption 
Vx Vy (x + y) = (y + x). 


(1) Vx Vy Wz ((x + y):z) = ((x-z) + (y: z)) Ass 
(2) Vy Wz ((x + y):z) = ((x*z) + (y*z)) UE, (1) 
(3) Vz ((x + x):z) = ((x*z) + (x-z) UE, (2) 
(4) (œ + x) x) = ((x+x) + (x+x)) | UE. (3) 
Vx ((x + x): x) = ((x- x) + (x+ x)) UI, (4) E 
(1) Vx Vy (x + y) 2 (y + x) Ass 
Q) Vy (x+y)=(y+x) UE, (1) 
(3) (x +0) = (0+ x) UE, (2) 
1 (4) Vx (x + 0) = (0 + x) UI, (3) 


Note that we cannot use the rule UE to go directly from line (1) to line (4) 
since the rule UE enables us only to eliminate a quantifier which occurs at the 
very beginning of a formula. Bi 


Ó — =. mnm xnm ee 
~ 
[2] 


It is convenient at this stage to introduce the following notation. We write 


PrP EV 


to mean that the formula y can be derived from the assumptions ¢,,...,,, that 
is, that there is a formal proof on whose last line the formula y occurs and the 
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assumptions in force on this line are included among the formulas $6150, 
The symbol F is often called the turnstile symbol and was introduced into logic 
by Gottlob Frege. 
Thus, in terms of this new notation, the formal proof in Example 2 shows that 
Vx Vy (x F y) (v x) F Vy Vx (x + y) ^ (v + x). It is not difficult to see 
that this is a particular instance of the fact that 

for every formula $ and all variables u, v, 

Vu Vv db F Vv Vu Q. 


In the cassette tape section which follows, we give some more examples of 
general results involving the derivability of formulas, and some hints on how to 
discover proofs. 


START THE TAPE WHEN YOU ARE READY 


Glossary of Pronunciation 
& E y H $ y 0 t 
and’ ‘implies’ ‘universal’ ‘derives’ ‘phi’ ‘psi’ ‘theta’ ‘tau’ 


Universal Quantifier Elimination Rule (UE) 

If the formula Yro occurs on a certain line in a formal proof where v is a 
variable and x is a term which may be freely substituted for v in $, then on any 
subsequent line we may derive the formula $ (z/r), and this formula will depend 
on the same assumptions as did Yvo. 


Special case of UE when x is the same as v: from Yvo we may derive 4, and 
this formula will depend on the same assumptions as did Ved. 


Universal Quantifier Introduction Rule (UI) 

If the formula $ occurs on a line of a formal proof and the variable v does not 
occur free in any of the assumptions in force on this line, then on any 
subsequent line we may derive Vr, and this formula will depend on the same 
assumptions as did @. 


EXAMPLE 3 For all formulas ¢, wy, Vx$, Vx(b->) F Vxy. 


1 (1) Vx Ass 
2 Q)  Vx(ó ^ y) Ass 
1 (3) [^ UE, (1) 
2 (4) (=y) UE. (2) 
i2 (5 Taut, (3), (4) 
1,2 (6) Vxy UL, (5) 
Tautology used in line (5): ($ & (6 > y) > y) 


E LT443 dd 
Lb PUO Td 


T 


tautology 
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LEM 3 Show that for all formulas ¢, y, 0, 
Vx(Óó > y) Yx > 0) E Vx($ 0). 


TION 3 1 (1) Vx(ó > v) Ass 
2 (2) Vx(y > 0) Ass 
1. 0G (4) URM) 
2 4) (9) UE, Q) 
1,2 (5) ($ > 0) Taut, (3), (4) 


1:3 (6) Vx($ > 0) UI, (5) 
Tautology used in line (5): (((ġ > y) & (W > 0) > ($ > 0) E 


MPLE 4 For all formulas 6, v, Vx($ > y) F (Yx > Vip). 
Outline Proof 


l (1) Vx(Ó > y) Ass 
l Q) (6 y) UE, (1) | Strategy: 
3 3) vxo Ass veil (A > B): 
i : derive B, 
L3 (k) Vo use CP to get (A > B). 
} (k+1) (Wx > Vxw) CP, (k) 
Full Proof 
i 0) Vx($ > y) Ass 
1 2) (=y) UE, (1) 
2 G) Wx Ass 
3 (4) 0$ UE, (3) 
Le NL. Taut, (2), (4) 
L3 (9 vx UL, (5) 
1 (7) (Yx > Vxw) CP, (6) 


Tautology used in line (5): (($ & (@ > y)) > y) 
LEM 4 Show that for all formulas ¢, V, — Vx($ & y) F (Vx & Vxy). 


LEM 5 Show that for all formulas ¢, v, 0, 
Vx($ > (W &0) F (Yx > (Wx & Vx0)). 


TION 4 Outline Proof 


1 () Vx(p & y) Ass 

1 (2 (6 & y) UE, (1) 
1 Vxó 

1 (k) Vx 


1 (k + 1) (Vx & Vxy) Taut, (j), (k) 
Tautology used in line (k + 1): ((Vxà & Vx) > (Vx & Vxy)) 
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Full Proof 
1 (1) Vx(ó & y) Ass 
1 (2) (6 & y) UE, (1) 
1 (3) $ Taut, (2) 
1 (4) Vxó UI, (3) 
1 (5) y Taut, (2) 
1 (6) Vxy UL (5) 
1 (7) (Vxó & Vx) Taut, (4), (6) 


Tautologies used in line (3): (($ & v) > 4) 
line (5): (6 & V) > V) 
line (7): ((Vx$ & Vx) > (vxo & Vxy)) B 


SOLUTION 5 1 (1) Vx($ > (y & 0)) Ass 
1 (2) ($ > (V & 0)) UE, (1) 
3 (3) Vx Ass 
3 (4) $ UE, (3) 
1,3 (5) Vy Taut, (2), (4) 
1,3 (6) Vxy UI, (5) 
1,3 (7) 0 Taut, (2), (4) 
1,3 (8) Vx0 UL (7) 
1.3 (9) (Vxy & Vx0) Taut, (6), (8) 
1 (10) (Yx — (Vxy & Vx0)) CP, (9) 


Tautologies used in line (5): (((@ > (V & 0)) & $) > y) 
line (7): (($ > (y & 0) & $) > 0) 
line (9): (Wx & Vx0) > (Vxp & Vx0) M 


Some guidelines for finding formal proofs can be found in the Appendix of this Unit. 


6.4 The Existential Quantifier Introduction Rule 


In informal mathematics the direct method for proving that there exists an 
object with a certain property is to exhibit an example of an object which has 
that property. Here is a simple example. 


Theorem There is a non-zero 2 x 2 matrix whose square is the zero 2 x 2 
matrix. 
1 


1 1 1 1 1 0 0 
Proof = : r= = : 
roof Let A E a Then A Li 3l E a b A 


Hence A is not the zero 2 x 2 matrix but A? is the zero 2 x 2 matrix. This 
completes the proof. W 


The pattern of this sort of argument gives us our formal rule for existential 
quantifier introduction. If we have a formula $(t/x) which expresses the fact 
that a term t has a certain property, then we can derive 3xó which expresses 
the fact that there is some object which has that property. 


Put the other way round, this says that to derive 3x, the direct method is to 
find a term t such that when we replace free occurrences of x in $ by t to obtain 
the formula ¢(t/x) we can then derive the formula $(z/x). From this we can 

then deduce 3x. As with the rule UE, we need for technical reasons to impose 
the restriction that t may be freely substituted for x in $. 
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Thus we are led to the following rule. 


Existential Quantifier Introduction Rule (ED 

If t is a term which may be freely substituted for the variable v in the formula 
$, and the formula $(t/v) occurs on a line of a formal proof, then on any 
subsequent line we may derive the formula 3v, and this formula will depend on 
the same assumptions as does (t/v). A 


We show that 3y 0” = (y +y) F 3z3r-- (yy) 
Í (1) dy 0" =(y+ y) Ass 
1 (2) 3z3yz=(y+y) El, (I) 
If we let ġ be the formula Jy z = (y + y), then the formula on line (1) is $(0''/z) 


and the formula on line (2) is Jz. Since the term 0'' may be freely substituted 
for z in $, this is a legitimate use of the rule EI. 


We show that Vx (x +0)=x H Vx 3y (x -y) 7 x. 


1 (1) Vx (x +0) =x Ass 

1 (2) x+0=x UE, (1) 
1 (3) dy (x+ y)=x EI, (2) 

1 (4) Vx dy (x + y)=x UI, (3) 


Note that we cannot use EI to go directly from line (1) to line (4) since the rule 
EI allows us to introduce an existential quantifier only at the very beginning of 
a formula. 


Show that 


(i) Yx(x+0)=x F 3yVx(x*y)- x; 
(ii) Vx (x-0')= x k Vx dy (x+y) =x; 
(ili) Vx (x+0)=x F Ix (x+x)=x. 


(i) 1 (1) Vx (x+0)=x Ass 
1 (2) dy Vx (x +y)=x EL (1) 
If we let ¢ be the formula Vx (x + y) = x, then the formula on line (1) is 
$(0/y) and the formula on line (2) is Jy. Since the term 0 may be freely 
substituted for y in ¢ this is a legitimate use of the rule EI. (It should be 


clear that if a term t contains no variables, then t may be freely substituted 
for any variable in any formula.) 


(ii) 1 (1) Vx (x°0') =x Ass 
1 (2) (x*0’) =x UE, (1) 
1 6) Ay (x-y)=x EI, (2) 
1 (4) Vx dy (x-y)=x UL (3) 


(iii) 1 (1) Vx (x +0) =x Ass 
1 (2) (0+ 0)=0 UE, (1) 
1 (3) ax (x +x)=x EI, (2) 
Notice that in deriving line (2) we are taking $ to be the formula 
(x + 0) = x and we are using the rule UE to go from Vxó to $(0/x). 
However, when we come to derive line (3) we are taking $ to be the 


formula (x + x) = x and we are using the rule EI to go from $(0/x) to 
jx. M 


Some further examples and problems involving the use of the rule EI will 
be found in the next section. 
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The Existential Hypothesis Rule 


The fourth rule of our formal system for the quantifiers is rather more subtle 
than the other three. By analogy with the rules for the universal quantifier, you 
might expect there to be an existential quantifier elimination rule which would 
enable us to drop an initial 3x from the beginning of a formula: But deductions 
of this kind would not, in general, be valid. From the fact that there is some 
object which has a certain property, we cannot deduce that any particular 
object has that property. So any rule which enabled us to derive o(t/x) from 
3xó could not possibly be logically valid. 


To discover what the second existential quantifier rule should be, we need to 
consider how we make deductions from existential statements in informal 
mathematics. 


The example we have chosen to look at comes from the theory of matrices. 
Again, do not worry if you are not familiar with this piece of mathematics since 
it is the logical form of the argument which we are interested in and not the 
mathematical details. 


We shall begin by giving a sample proof, just as you might find it in an algebra 
textbook. Then, in order to make the logical form clearer, we shall rewrite the 
proof using logical symbols. Finally, we shall extract from this the logical rule 
we are seeking. 


Here then is our sample proof. 
Theorem If the matrix A has an inverse, then the determinant of A is non-zero. 


Proof Suppose B is the inverse of A. 


Then AB = i and hence det(A) x det(B) = det(AB) = det(I) = 1. Hence 
det(A) 4 0. 


This completes the proof. W 
Now let us symbolize ‘B is the inverse of A’ by BInvA. The theorem asserts that 


from 3B B Inv A it follows that det(A) + 0, and, leaving out the algebraic details. 
the proof of the theorem has the following form: 


> 


Suppose B Inv A. 


algebra 


Hence det(A) z 0. 
This completes the proof. 


Although the theorem asserts that det(A) 7 0 follows from the assumption that 
3B B Inv A, we see that in the proof we do not start from this assumption and 
deduce that det(A) 0. Instead, the assumption with which we start the proof is 
B Inv A. However, when we finally manage to deduce that det(A) + 0, we claim 
that the proof has been completed, i.e. that we have, in fact, shown that 

det(A) z 0 follows from the assumption 3B B Inv A. 


The reason we can make this claim is that in the course of the proof we made 
no assumptions about B other than that given by our initial assumption 

B Inv A, and the conclusion we finally reach, det(A) 4 0, makes no mention of 
B. So this conclusion really depends only on the assumption that there is some 
matrix B which is the inverse of A, i.e. the conclusion really depends only on the 
assumption 3B B Inv A, which is what the theorem asserts. 
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This example is typical of the way existential hypotheses are used in 
mathematical arguments. To deduce some conclusion from the assumption that 
there is some object x which satisfies the property expressed by @, i.e. from the 
assumption 3x, we assume that x is an object which has the property 
expressed by ¢ and deduce the desired conclusion without making any further 
assumptions about x. 


So the formal rule we are looking for needs to express the fact that, if we can 
derive a formula y from the assumption $ and possibly other assumptions 
which do not contain x as a free variable, then we can also derive ij from 3x 
and the other assumptions. For this rule to be logically valid we must also 
impose the condition that y ‘makes no mention’ of x, i.e. that x does not occur 
as a free variable in y. Thus we are led to the following rule. 


The Existential Hypothesis Rule (EH) 

Let y be a formula which contains no free occurrences of the variable v. If on a 
certain line of a formal proof we have derived the formula y from the 
assumption $ and possibly other assumptions in which v does not occur free 
(though v may occur free in $), then on any subsequent line we may derive y 
from 3vó and these other assumptions. A 


MPLE 1 (This example is also discussed in the cassette tape for this section.) 

For all formulas ¢, 0, Ixo, Vx($ > 0) F 3x0. 

1 (1) dx Ass 

2 (2) Vx(o > 0) Ass 

3 (3) o Ass 

2 4) ($9) UE, (2) 

2,3 (5) 0 Taut, (3), (4) 

2,3 (6) 3x0 EI, (5) 

L2 (7) 3x0 EH, (6) 

Tautology used in line (5): ((ġ & (9 > 0)) > 0) 
Since 3xó is one of the assumptions from which we wish to derive 3x0, we write 
this formula down as an assumption on line (1) so that it gets a number. 
However, we make no use of line (1) until the very end of the proof. We know 
that, because of the rule EH, to derive 3x0 from the assumptions 3x4 and 
Vx($ > 0) it will be good enough to derive 3x0 from the assumptions $ and 
Vx($ > 0). So we write these formulas down as assumptions on lines (2) and 
(3). By line (6), we have derived 3x0 from the assumptions on lines (2) and (3). 
Clearly, the variable x does not occur free in 3x0; nor does x occur free in the 
additional assumption, Vx($ — 0), used to derive 3x0 on line (6). Since on this 
line we have derived 3x0 from $ and the additional assumption Vx($ 0), the 
rule EH tells us that we can derive 3x0 from 3x and the same additional 
assumption. This we have done on line (7). 

AMPLE 2 For all formulas ¢, y, 3x(ó & y) F (Gx & Ixy). 

1 (1) 3x(ó & y) Ass 

2 Q) (6 & y) Ass 

2 (3) [^ Taut, (2) 

2 (4) Ixo EI, (3) 

2 (5) Vy Taut, (2) 

2 (6) Ixy EL (5) 

2 (7) Exo & 3xy) Taut, (4), (6) 

1 (8) (3x$ & Ax) EH, (7) 
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Tautologies used in line (3): ((b & y) 4) 
line (5): ((6 & V) > V) 
line (7): (Gx & Ixy) > (Ax & 3xy)) 


In this example there are no additional assumptions, so to see that the use of 
EH on line (8) is legitimate, we need only observe that the variable x does not 
occur free in the formula (3x$ & 3xy). O 


The following cassette-tape section looks at further examples of formal proofs 
using the rules EI and EH, and looks at the strategies used to produce such 
proofs. 


START THE TAPE WHEN YOU ARE READY 


Glossary of Pronunciation 
& > — V 3 F o v 0 t 
‘and’ ‘implies’ ‘not’ ‘universal’ ‘existential’ ‘derives’ ‘phi’ ‘psi’ ‘theta’ ‘tau’ 


Existential Quantifier Introduction Rule (EI) 

If t is a term which may be freely substituted for the variable v in the formula 
$, and the formula $(t/v) occurs on a line of a formal proof, then on any 
subsequent line we may derive 3v, and this formula depends on the same 
assumptions as did ¢ (t/v). 


Existential Hypothesis Rule (EH) 

Let y be a formula which contains no free occurrences of the variable v. If on a 
certain line of a formal proof we have derived the formula y from the 
assumption $ and possibly other assumptions in which v does not occur free 
(though v may occur free in $), then on any subsequent line we may derive y 
from 3vó and these other assumptions. 


For all formulas 4, dx dyp + 3y3xQ. 
1 (1) 3x 3y Ass 


(2) Jyo Ass 
(3) o Ass 
(4) Ix EI, (3) 


(5) dy dx@ EIl, (4) 
(6) | 3y3xó EH, (5) 
1 (7  3py3xó EH, (6) 


N Ww WwW UUN 


Show that for all formulas 4, y, where the variable x does not occur free in y, 


Vx(ó > y) F xd > y). 


1 (1) Vx( > y) Ass 

1 Q) (>y) UE, (1) 

3 (3) dx Ass 

4 (4) o Ass 

1,4 (5) Vy Taut, (2), (4) 
1,3 (6) y EH, (5) 

1 ()  Gxó v) CP, (6) 


Tautology used in line (5): (($ & (6 —My) v) E 
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PLE 4 For all formulas ¢, dx -—p k —VYxd. 
Outline Proof 


1 (1) dix —¢ Ass 
2 (2) —-ó Ass 
3 (3) vxo Ass 
proof by 2,3 (k) (0 & —0) 
contradiction 
(k 4- 1) (Vxp > (0 & —0)) CP, (k) 
2 (k + 2) —Vxó Taut, (k 4- 1) 
1 (k + 3) —Vxó EH, (k + 2) 


Note: a contradiction is a formula of the form (0 & — 9). 


General form of the tautology needed in proof by contradiction 


(Ww > (0 & — 09)2 — y) 


101001 101 
100010101 
011001 110 
010010110 
Full Proof 
1 (1) dx —¢ Ass 
2 Q) -ó Ass 
3 (3) Vx Ass 
3 (4) $ UE, (3) 
23 (5) (p & —4) Taut, (2), (4) 
2 (6) (Yx > (p & —9) | CP,(5 
2 (7) —Vx$ Taut, (6) 
1 (8) —Vx$ EH, (7) 


Tautologies used in line (5): ((—4 & p) — (6 & —4)) 
line (7): ((Vx$ > ($ & —$)) > —Vx) 
BLEM 2 Show that for all formulas 4, dxf F —Vx —6. 
BLEM 3 Show that for all formulas 6, y, Vx(j —^$) + (Ax —ó -—Vxy) 


UTION2 | (1) Ixo Ass 
2 (2) $ Ass 
3 (3) Vx —ó Ass 
3 (4) —¢ UE, (3) 
2,3 (5) ($ & —¢) Taut, (2), (4) 
2 (6) (vx $^ (6 & —4) — CP, (5) 
2 (7) —Yx —ó Taut, (6) 
1 (8) —Yx —$ EH, (7) 


Tautologies used in line (5): (($ & —$) > (6 & —4)) 
line (7): ((Vx —$ > (6 & —$)) > -vx -9) E 
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1 (1) Vx( > $) Ass 
1 (2) (9) UE, (2) 
8 (3) dx -—¢ Ass 
4 M -¢ Ass 
5 (5) Vxy Ass 
5 (6) y UE, (5) 
13 (7) o Taut, (2), (6) 
1,4,5 (8) (od & —4) Taut, (4), (7) 
14 (9) (Vx y > (6 & —¢)) CP, (8) 
1,4 (10) —Vxy Taut, (9) 
1,3 (11) —Vxw EH, (10) 
1 (12) (3x —ó > —Vxy) CP, (11) 
Tautologies used in line (7): — ((V > $) & y) 9) 

line(8: ((-¢ & 6) > (9 & —$)) 

line (10): ((Vxy > ( & —9) > —vxy) M 


Some guidelines for finding formal proofs can be found in the Appendix of this unit. 


Show that for all formulas ¢, y, dx(ó v y) Vx—ó Fk dx. 


Show that for every formula 4, 3x Vyó Fk Vy3xQ. 


Find the mistakes in the following 'proofs'. 


(i) We show that for each formula ¢, Ixo FVx$ó M 
1 (1) 3x$ Ass 
2 (2) o Ass 
2 (3) Yx UI, (2) 
1 (4) Vx EH, (3) 
(ii) We show that for all formulas ¢, y, Ix, Ixy F3x($ & y) !! 
1 (1) Ixo Ass 
2 (2) Ixy Ass 
3 (3) $ Ass 
4 (4) y Ass 
34 (5 (&yp) Taut, (3), (4) 
3,4 (6) 3x(ó & y) EI, (5) 
14 (7) 3x($ & y) EH, (6) 
1,2 (8) 3x(ó & y) EH, (7) 


Tautology used in line (5): ((¢ & y) > (6 & y)) 

We hope it is clear to you that if our formal system does meet requirement 
(b) of Section 6.0 that our rules are logically valid then there must be 
something wrong with these formal proofs, since in both cases the 
conclusion is not a logical consequence of the assumptions. 
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1 ( —3x( v) Ass 

2 (2) Vx —@ Ass 

3 (3 @vw) Ass 

2 (4) m^ UE, (2) 

2.8 (5) Vy Taut, (3), (4) 
2,3 (6) axy EI, (5) 

1,2 (7) Ixy EH, (6) 
Tautology used in line (5): (((ġ v W)& —¢) y) m 
1 (1) 3x Vy Ass n 

2 (2) Vye Ass 

2 (3) [ UE, (2) 

2 (4) Ixo EI, (3) 

2 (5) Vy 3xó UI, (4) 


1 (6) Vy 3x EH, (5) 


This proof is rather pretty in that it uses each quantifier rule once. As usual 
when we are trying to deduce a formula from an assumption of the form Ixy, 
we make the extra assumption w and try to derive the desired conclusion from 
that. The crucial steps are lines (5) and (6). The use of UI on line (5) is 
legitimate since the variable y does not occur free in the formula on line (2), 
which is the only assumption on which line (4) depends. On line (5) we have 
derived our desired conclusion from the assumption Vy. Since x does not occur 
free in the conclusion on line (5), we can now use EH to derive this same 
conclusion from the assumption 3x Vy. W 


(i) The mistake is on line (3). In general, the variable x will have free 
occurrences in the formula ¢, and line (2) has @ as an assumption. So the 
use of UI to obtain line (3) is not legitimate. 


(ii) The mistake is in the use of EH on line (7). In general, the variable x will 
have free occurrences in the formula y. This formula is used as an 
additional assumption on line (6). So the use of EH to derive line (7) is not 
legitimate. Notice, on the other hand, that there is nothing wrong with the 
use of EH on line (8), since in this case the additional assumption on 
which line (7) depends, that is, the formula 3x on line (1), does not 
contain any free occurrences of the variable x. Bil 


Identity Rules 


There are two rules governing the identity symbol — : an introduction rule and 
a substitution rule. The introduction rule is very straightforward. It is based on 

the principle that everything is identical with itself. (The saying ‘as sure as eggs 

is eggs’ is thought by some to be a corruption of ‘as sure as x is x’, i.e. ‘as sure 

as x = x’) 


Identity Introduction Rule (II) 
For each term t the formula 


TER 
may be written down on any line of a proof and does not depend on any 
assumptions. A 
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We show that - Vx x — x. (The absence of any formulas to the left of the 
turnstile, F, indicates that there is a formal proof of which the last line is 
Vx x — x, and that this line does not depend on any assumptions.) 


(1) hax II 
(2) Wxx=x  UL(1 
Notice that since line (1) does not depend on any assumptions, the use of UI on 


line (2) is legitimate since, vacuously, the variable x does not occur free in any 
of the assumptions—there are none—on which line (1) depends. O 


We have to be a little more careful with the other rule for =. It corresponds to 
the principle that ‘equals can be substituted for equals’. That is, if two terms t "m 
T, have been shown to be equal, in the sense that we have derived the formula 
Tı = 15, then we should be able to substitute one for the other in any formula. 
There is, however, in transferring this principle into our formal system, a 
difficulty of the same kind as we met with the rule UE. For consider the 
following example. 


dzz 2 (y +0’) (1) 
y-(z*0) Q) 
3z z= ((z + 0’) + 0’) (3) 


If we interpret + as being addition of natural numbers, 0’ as the number 1, free 
occurrences of y as referring to the number 2, and free occurrences of z as 
referring to the number 1, then formulas (1) and (2) are true, but (3) is false. 
(Notice that z has no free occurrences in (3).) We have obtained formula (3) 
from formula (1) by substituting the term (z + 0") for the term y, using the fact 
that formula (2) says that these terms are equal. Since this substitution has led 
from true formulas (under our given interpretation) to a false formula, it does 
not correspond to a valid rule of inference. Clearly, what has gone wrong is that 
when we make the substitution, the occurrence of z that we introduce has 
become bound in the resulting formula (3). 


To avoid this difficulty, we formulate our rule as given below. Although the 
formulation is rather long-winded in order to deal with the problem just 
mentioned, its use in practice is usually straightforward. 


Substitution Rule (SR) 

Suppose that each of the terms t, and t, may be freely substituted for the 
variable v in the formula $. Let $, be a formula which results when some (but 
not necessarily all) of the free occurrences of v in $ are replaced by t,, and let 
$ be the formula that results when these same occurrences are replaced by 1). 
Then if on two lines of a formal proof the formulas t, — t, and $, occur, on 
any subsequent line we may derive >, and $; will then depend on all the 
assumptions in force on the lines on which the formulas t, = t, and ¢, 

occur. A 


Let us give some examples of formal proofs that use these rules. 


F Yx Vy(x =yox'’=y’) 


1 (1) ony Ass 
(2) x =x’ II 

1 G) xzy SR, (1), Q) 
à) x2yox-y) CP, (3) 
G) Vy(xzyox zy) UL (4) 
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In terms of the notation used in stating the rule SR, ¢ is the formula x’ = v, 

1, is x and q; is y. Thus the formula on line (1) is t, = t>, the formula on line (2) 
is $, which is $(x/v), and the formula on line (3) is $z which is $(y/v). 
However, it is probably easier to think of line (3) as arising from the 
replacement of the second occurrence of x in the formula in line (2) by y. This 
substitution is justified by the rule SR since we have the formula x — y on line 


(1). 


F Vx Vy(x = yo y =x) 


1 (1) XL Ass 
(2) x=x II 
1 G) yex SR, (1), 2) 
(4) (x=y>y=x) CP, (3) 
(8  Vyx2yoy-x UL (4) 
(6) Vx W(x y 5 y—x) UI, (5) 


Line (3) here is justified by the rule SR since the formula on line (3) has been 
obtained by substituting y for the first occurrence of x in the formula on line 
(2), and x = y is the formula on line (1). 


Establish the following. 
(i) F VxVyVz(x = yo (z + x) = (z y) 
(ii) F VxVyVz(x = y o (y 9 zo x — z)) 


(i) 1 (1) x=y Ass 
(2) (z + x) =(z +x) ll 
1 (3) (z+ x)=(z+y) SR, (1), (2) 
(4 (x=y-> (z+x)= (z+ y)) CP, (3) 
(5) Vz(x = y > (z + x)= (z + y) UI, (4) 
(6) Vy Vz(x = y> (z + x)= (z + y) UI, (5) 
(7) Yx Wy Vex =y>(z+x)=(2+y)) UI, (6) 


Here line (3) has been obtained by substituting y for the second occurrence 
of x in the formula on line (2). 


Gi) 1 (1) x=y Ass 
2 (2) y=2 Ass 
L2 (3) x=z SR, (2), (1) 
1 (4) (=z > x =z) CP, (3) 
65) (@=y>(y=z>x=2)) CP, (4) 
(6) Yz(x = y > (y =z > x =z)) UI, (5) 
(7) Vy Yz(x = y > (y =z > x =2)) UI, (6) 
(8) Vx Yy Yz(x =y > (y=z > x=z)) UIl, (7) 


Notice that here it is the formula on line (1) that plays the role of $, and 
the formula on line (2) that plays the role of 1, = 15. Thus the formula on 
line (3) has been obtained by substituting z for y in the formula on line 


(1). E 
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The Correctness and Adequacy of Our System 


We do not have the space to justify fully that our formal system satisfies the 
two conditions given in Section 6.0. Nor have we developed all the technical 
machinery that would be needed to do so. Nevertheless, we hope that our 
informal discussions make it fairly clear that they are satisfied. 


Consider first the requirement that there should be an algorithm to check 
whether a given sequence of formulas is a formal proof. To do this we have to 
be able to check whether the uses of the formal rules are legitimate. This 
involves answering such questions as ‘does the variable x occur free in any of 
the assumptions?’, and it should be fairly obvious that there is an algorithm 
which answers such questions. 


The second condition, that the rules are logically valid, is more of a problem 
since we have not given any precise definition of an ‘interpretation’. We hope, 
however, that our informal discussions have convinced you of the plausibility of 
the following theorem, which we merely state but which will prove to be very 
useful in the next unit. 


The Correctness Theorem 

If $,,..., 0, F V, then y is a logical consequence of the formulas Piss Py Le. 
any interpretation of the non-logical symbols which makes each of Pi- Pk 
true also makes y true. 


We can also ask the converse question. If y is a logical consequence of 

Pi»: --» Op is there a formal proof of our system which demonstrates this, i.e. is it 
true that $,,..., d, + Y? This is a deep question, which amounts to asking: is 
our formal system adequate for deriving all logical consequences which can be 
expressed in the system? 


The answer to this question is ‘yes’, but the proof is not easy and so we omit it 
entirely. Indeed, although the system of formal logic described in Units 5 and 6 
was first published (in a superficially different but essentially the same form) by 
Gottlob Frege in 1879, it was some 50 years before Kurt Gödel, in 1930, proved 
that the answer to our question is ‘yes’. So we state, without any attempt at a 
proof, the following theorem. 


The Adequacy Theorem 
If y is a logical consequence of the formulas $1,..., Py then $,,..., Qr F y. 


Despite this theorem, there are many formulas that you might expect to be 
derivable in our system which, in fact, have no formal proofs. One such is 

Vx (x*0*) = x. The reason why this ‘true’ formula is not derivable, is that its 
truth is not a matter of pure logic alone; it depends on our interpretation of the 
arithmetical symbols - and 0'. So to be able to derive this formula we need to 
add some arithmetical axioms which express the basic properties of the 
arithmetical symbols. We turn to this task in the next unit. 
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Objectives of Unit 6 


We list those things on which we may set assessment questions to test your 
understanding of the unit. After working through the unit, we feel you should be 
able to: 


(i) determine whether occurrences of variables in formulas are free or bound; 


ii) determine whether or not a given term may be freely substituted for a 
t g 
given variable in a given formula; 


(iii) understand the meaning and use of each of the rules UE, UI, EI, EH, II 
and SR; 


(iv) check a purported formal proof to see whether the uses of these rules are 
legitimate or not; 


(v) construct simple formal proofs using these rules together with the rules 
introduced in Unit 5; 


(vi) explain the Correctness and Adequacy Theorems. 


Appendix: Guidelines for finding formal proofs 


The following tips will usually be helpful in finding formal proofs. 
(1) Begin by writing down the assumption formulas. 


(2) Use UE to eliminate quantifiers from formulas which begin with universal 
quantifiers. 


(3) When assumptions begin with existential quantifiers, prepare for a use of 
EH by introducing a new assumption. 

(4) Look at the conclusion you are trying to derive. 

(5) If the conclusion has the form Vr¢, try to derive $ and then use UI to get 
Vvo. 

(6) If the conclusion has the form ($ — y), introduce $ as a new assumption 
and try to derive y. Then use CP. 


(7) If the conclusion has the form ($ & y), try to derive $, y separately and 
then use the Tautology Rule to get (¢ & y). 

(8) If the conclusion has the form — $, introduce $ as a new assumption and 
try to derive a contradiction, i.e. a formula of the form (0 & — 0); this is 
often done by separately deriving 0 and — 0, and then deriving (0 & —0) by 
the Tautology Rule. 


(9) Look for possible uses of the Tautology Rule. 
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Introduction 


In Units 5 and 6 we described a set of rules for carrying out logical deductions. 
We claimed (although we omitted the proof) that these rules are adequate for 
deriving all logical consequences expressible in our language. However, we also 
remarked that there are ‘true’ sentences which cannot be derived. 


This is not surprising since the logical rules provide only a framework for 
making deductions. To do mathematics within this framework we need also 
some axioms which express the basic properties of the mathematical concepts 
we are working with. 


Our aim is to carry out deductions in number theory. That is why we included 
in our language the arithmetical symbols, 0, ', +, +. 


We therefore begin this unit by describing what it means for a sentence of our 
formal language to ‘express’ a mathematical property and, in particular, a 
property of numbers. (Recall from Unit 6 that a sentence is defined as a formula 
with no free variables.) We can then explain what we mean by an axiom and 
then formulate the particular system for number theory which we shall be using 
in the rest of this course. 


An Axiom System for Number Theory 


We begin this section by discussing the interpretation of the arithmetical 
symbols. 


It should be clear how we intend the arithmetical symbols to be interpreted. 0 is 
interpreted as standing for the number 0. ’ stands for the successor operation of 
adding one, and +, - stand for addition and multiplication respectively. There is 
one other thing we need to specify, namely, which collection of numbers we are 
talking about. For consider the sentence 

Vxdpx ey 
which is interpreted as: 


For every number x, there is a number y such that x is obtained from y by 


adding one. 
We cannot determine whether or not this sentence is true until we are told 
which set of numbers is under consideration. It is true for the set {..., —2, — 1,0, 
1, 2, ...j of all integers (since every integer has an immediate predecessor), but 


not true for the set N = (0, 1, 2, ...} of natural numbers, since 0 is not the 
successor of any element in N. We see from this example that for each 
interpretation we have to specify a domain of discourse, i.e. a set of objects to 
which our formulas refer, or, to be precise, to which the variables in our 
formulas refer. If our domain is a set U then Vx is interpreted as ‘for all x in U^ 
and 3x as ‘there is at least-one x in U’. 


The tradition in formal number theory is to regard the set N of natural 
numbers as the domain we are primarily interested in. We therefore call the 
interpretation we get by taking this set as the domain the standard interpretation 
(the arithmetical symbols being interpreted as described above). Any other 
interpretation of the arithmetical symbols with a specified domain is called a 
non-standard interpretation. Thus the set U of all integers 1..., —2, —1,0,1,2,...! 
with, for instance, the same interpretation of 0, ', --,* as above is a non- 
standard interpretation. 
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Notice that the sentence Vx Jy x = y’ is false in the standard interpretation but 
true in the interpretation U of all integers just described, so it is perfectly 
possible for the same sentence to be true in one interpretation but false in 
another. Such sentences of our formal language are called contingent. Another 
example of a contingent sentence is 


Ay (ry) = 0". (*) 
In the standard interpretation this is interpreted as 


There is a natural number y, which, when multiplied by itself, yields the 
successor of the successor of 0, 


or in other words, 
There is a natural number which is a square root of the number 2, 
and this is clearly false. 


Thus the sentence (*) is interpreted as being false in the standard interpretation. 
We claim we can now find an interpretation in which (x) is true. Unfortunately, 
the interpretation U with domain the set of all integers described above will not 
do, since (*) is also false in this interpretation (because 2 has no square root in 
the set of integers). However, suppose we take as our domain the set of real 
numbers and interpret 0 as the real number 0, ' as the function ‘add one’, and 
+, + as addition and multiplication of real numbers, respectively. Then the 
sentence («) is interpreted as 


There is a real number y, which, when multiplied by itself, yields 0 plus one 
plus one, 


or in other words 
There is a real number which is a square root of 2, 
and this is true. Thus the sentence(*) comes out true in this interpretation. 


Thus, as the sentence Jy (y-y) = 0" is true in one interpretation but false in 
another (namely the standard interpretation), it is contingent. 


We shall continue our discussion of non-standard interpretations in Section 7.3. 
For the moment, our concern is the standard interpretation and the set of all 
sentences of our formal language which are true in the standard interpretation. 
We have already remarked that there are such true sentences which cannot be 
derived in our formal system, and this is not surprising since none of our rules 
make any reference to this particular interpretation of the arithmetical 
symbols—indeed, we made sure that our rules were logically valid, that is, valid 
in all possible interpretations. We must now pay more attention to the intended 
(Le. standard) interpretation of the arithmetical symbols and incorporate some 
features of it into our formal system. We shall look for properties of addition 
and multiplication of natural numbers which can be expressed in our formal 
language by some (preferably simple) set, S say, of sentences, the idea being that 
as many true (in the standard interpretation) sentences as possible should be 
derivable from S. Then the sentences in the set S will be regarded as permanent 
assumptions about the standard interpretation that we may introduce into a 
formal proof at any stage. Sentences used as assumptions in this way are 
normally referred to as axioms. 


Let us introduce some further terminology. An axiom system T consists of a set 
of axioms and all the sentences derivable from these axioms using the rules of 
proof in Units 5 and 6. The theory of an axiom system T is the set of all 
sentences derivable from the axioms in T: these sentences are described as 
theorems of T. 
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The formal number theory we are going to look at will be the theory (in the 
technical sense above) of some axiom system, and so we need to choose some 
axioms. How should we choose these? We suggest the following criteria. 


Requirements for an axiom system 
(1)The axioms must be evidently true under the standard interpretation. 


(2)There must be an algorithm for determining whether a formula is an axiom. 
(3) We should be able to derive as many theorems as possible from the axioms. 
(4) The axioms should be as simple as possible. 


(1) and (2) are precise requirements which every system of axioms must satisfy. 
(Of course, (2) is a precise requirement since we have a precise notion of 
algorithm.) Requirement (2) is a mathematical way of expressing the fact that 
we want to be able to ‘write down explicitly’ the set of axioms. Requirements (3) 
and (4) are not so precise and to sóme extent conflict with one another—the 
simpler the axioms are, the fewer sentences one would expect to be able to 
derive from them. Following BJ, we give greater weight to (4). We shall choose 
to work with a very simple set of axioms, which is, however, ideally suited to 
our purpose of investigating general properties of systems of formal number 
theory. We shall see that the system we choose to work with fails badly in some 
ways (but not others) on requirement (3), but, subsequently, we shall discuss 
how the system might be strengthened to meet this requirement. The system we 
shall be investigating is denoted by Q. It has seven axioms. 


The Axioms of the System Q 

QI VxVy(x =y +x =y) 

Q2 Vx—-0-x 

Q3 Vx (-—x=0->4y (x=y’)) 

Q4 Vx (x+0)=x 

Q5 Vx Vy (x + y') = (x + yy 

Q6 x (x0) =0 

Q7 Vx Vy (xy) = ((x* y) + x) 

Let us check that our first requirement for an axiom system holds for Q, that is, 
that each of the above axioms is true in the standard interpretation. 
Firstly, Q1 is interpreted as: 


For every natural number x and for every natural number y, if the 
successor of x is the same number as the successor of y, then x equals y. 


As the successor function s: N — N is a one-one function, axiom Q1 is indeed 
true in the standard interpretation. 


Q2 is interpreted in the standard interpretation as: 
For every natural number x, it is not the case that the successor of x is 0. 
Again this is evidently true. 


We shall now check Q5 and leave you to check the rest of the axioms as an 
exercise, in the hope that it is now clear that the axioms of Q are merely the 
formal expressions of familiar properties of the natural numbers. 


Q5 is interpreted as: 


For every natural number x and for every natural number y, the sum of x 
and the successor of y is equal to the successor of the sum of x and y. 


This is again true, being, you may recall from Unit 3, part of the recursive 
definition of the sum function. 


Let us now consider our second requirement for an axiom system. As Q has 
only finitely many axioms, there is a very simple algorithm for determining 
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whether a formula $ is an axiom. Just compare $ with each of the seven axioms 
of Q in turn. If ¢ is the same as one of the sentences Q1—07, then it is an 
axiom; otherwise, it is not. 


We hope you agree that the set of axioms of Q is very simple, so that our fourth 
requirement is met, but before we demonstrate (in Section 7.3) that our third 
requirement is not met, we shall, in the next section, give some examples of 
sentences that are theorems of Q. 


Write down the properties of the standard interpretation expressed by each of 
the axioms Q3, Q4, Q6 and Q7, and hence satisfy yourself that each of these 
axioms is interpreted as being true in this interpretation. 


Q3 is interpreted as: 
Every non-zero natural number x has an immediate predecessor; that is, 
for every non-zero natural number x, there is a natural number whose 
successor is x. 

04 is interpreted as: 
For every natural number x, the sum of x and zaro is x. 

Q6 is interpreted as: 
For every natural number x, the product of x with zero equals zero. 

Q7 is interpreted as: 
For every natural number x and for every natural number y, the product 
of x with the successor of y equals the sum of the product of x with y 
and x. 

(Again note that Q6 and Q7 give the recursive definition of the product function 

in Unit 3.) B 


Proofs in the System Q 


In this section we shall look at some of the theorems of the system Q. 


(i) If Tis an axiom system and ¢ is a formula, then we write Hr to mean 
that there are axioms ¢,,..., $, in the system T such that ¢,,..., Pn to. 
Note that any formula provable using no assumptions is automatically 
provable in any axiom system T, i.e. if Ho then Hro. 


(ii) We shall use n to abbreviate 0*::7 so that e.g. 2 stands for 0”. Since in the 
standard inter .etation the symbol 0 is interpreted as 0 and the symbol ' is 
interpreted 7 add one’, clearly the term n will be interpreted as the 


number n. 


(iii) We shall son;etimes use t, # t, as an abbreviation for the formula 
—1, = 15, Where t, and c; are terms. It is, however, generally advisable 
not to use this abbreviation in a formal proof. 

(iv) From now on we shall not write down any tautologies used in a proof 
underneath that proof, as these tautologies can be easily reconstructed 
using the information on the lines where the Tautology Rule has been used. 


Fo1z2, ie. Fo —0 =0". 


We shall, in fact, show that Vx Vy (x! = y > x =y), Vx—0-2x' F -0 =0". 
As the assumption formulas in this proof are in Q (they are Q1 and Q2 
respectively), this suffices, by definition of tg ¢, to show that Fo1 42. (In 
Section 7.3 we shall show that any proof of 1 # 2 requires some arithmetical 
axioms like those of Q used above. One cannot prove 1 7 2 using purely the 
rules of Units 5 and 6.) 
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Our proof is as follows. 


1 (1) Vx Vy (x =y 9x — y) Ass 

2 (2) Vx—0-x Ass 

3 (3) 0920" Ass 

1 (4) Yy (09 =y 250-y) UE, (1) 

1 (5) (0° = 0" -0=0') UE, (4) 

1.3 (6) 0-0 Taut, (3), (5) 
2 (7) -0=0 UE, (2) 
1,23 (8). (0 —0 & —0-— 0) Taut, (6), (7) 
1,2 (9) (0 = 0” + (0=0' & —0=0')) CP, (8) 

1,2 (10)  -0-0" Taut, (9) 


The first three lines of this proof follow the guidelines described in the cassette 
tapes that accompanied Unit 6. Thus we first write down our assumptions and 
then observe that the formula we are trying to prove is of the form — $, so we 
assume 6 on line (3) and try to deduce a contradiction. The way we have 
deduced the contradiction is by formalizing the following informal argument. 
Suppose | = 2. Now | = 2 implies 0 = 1 (by reducing both sides by one), 
hence 0 = 1. However, 0 + 1 so we have a contradiction. 


Now it is axiom Q1 that allows us to ‘reduce both sides by one’, and this 
explains why we have applied the rule UE on lines (4) and (5) in the way 
shown. We are aiming at the formula (0' = 0" > 0 = 0’) (ie. '1 = 2 implies 

0 = 1’), and the easiest way to obtain it is by removing the symbols Vx from Q1 
and replacing x by 0, which we have done on line (4), and then removing Vy 
and replacing y by 0’, which we have done on line (5). (The uses of the rule UE 
are valid since the terms we are substituting here, namely 0 and 0’, contain no 
variables so can be freely substituted in any formula.) 


We now use the axiom Q2 to obtain, on line (7), the negation of the formula on 
line (6), and hence reach the required contradiction by a simple use of the rule 
UE, namely by removing the symbols Vx from Q2 (on line (2)) and substituting 
the term 0 for x. 


Lines (8), (9) and (10) of the proof are just the routine completion of a proof by 
contradiction as described on the second cassette tape of Unit 6. 


Show that tg2 5-3, ie. tg — 0" — 0". (Hint: As above, only axioms Q1 and 
Q2 need to be used as assumptions, but you will need to use Q/ twice, once to 
‘reduce’ 2 = 3 to 1 = 2, and again to ‘reduce’ 1 = 2 to 0 = 1.) 


Show that F50 #3, ie. tg — 0 = 0". (You will need only axiom Q2 here.) 


Show that F51 5*4, ie. Fg — 0' ^ 0". (As above, only axioms Q1 and Q2 will 
be needed here.) 


1 (1) Vx Vy (xX =y >x=y) Ass 

2 (2) Vvx—0-2x Ass 

3 (3) 0” = 0” Ass 

1 (4) Vy (9 =)’ >0' =y) UE, (1) 

1 (5) (0” = 0” 509 = 0") UE, (4) 

L3 (6 €-9 Taut, (3), (5) 

1 (7) Vy ~ =)’ 30=y) UE, (1) 

1 (8) (0° =0" -0=0') UE, (7) 

1,3 (9) 0-0 Taut, (6), (8) 

2 (10 | —-0290 UE, (2) 

12,3 (11) (020 & -0=0) Taut, (9), (10) 
L2 (2) (0-0"5(0-0 & —0—-0)) CP, (11) 

12 (13. —0"=0" Taut, (12) M 
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1 (1) Vx—0-2x Ass 

1 (2) -0-20" UE. (1) 
(Here we have substituted the term 0" for x in line (1)togetline(2)) B 

1 (1) Vx Vy (x =y > x =p) Ass 

2 (2) Vx —0 =x’ Ass 

3 (3) 0’ = 0" Ass 

1 4)  Vy(0 =y'>0=y) UE, (1) 

1 (5) (0° =0" 50-0") UE, (4) 

L3 (6) 0-0" Taut, (3), (5) 
2 (7) —-0-20" UE, (2) 
12,3 (8) (0 — 0" & —0=0") Taut, (6), (7) 
1,2 (9) (0 = 0” —> (0 = 0” & —0 = 0”)) CP, (8) 

1;2 (10  -0 20" Taut, (9) BM 


The examples and problems above show that Q has enough axioms for us to 
derive simple inequalities between numerical expressions (i.e. terms). We shall 
next derive some equalities between numerical expressions, the idea being to use 
the recursive nature of axioms Q4, Q5 and Q6, Q7. (As we have mentioned, 
these axioms express just the recursive definitions of atidition and multiplication 
respectively.) Thus our proofs will be formal counterparts of the calculations we 
did at the beginning of Unit 3 where we used, for example, the recursive 
definition of addition to show 2 + 4 = 6. 


Fo(2+1)=3, ie tg (0° +0’) =0". 
We shall, in fact show Q4, Q5 + (0" + 0’) = 0". Here is our proof. 


1 (1) Vx (x+0)=x Ass 

2 (2) Vx Vy (x + y) = (x + y) Ass 

2 (3) Yy (0 +y’)=(0" + yy UE, (2) 

2 (4) (0" + 0’) = (0" + 0) UE, (3) 

1 (5) (0" + 0) = 0" UE, (1) 
hz (6) (0" + 0’) = 0” SR, (4), (5) 


After writing down the assumptions on lines (1) and (2) we immediately look at 
the formula we are trying to derive for a clue as to which terms we should 
substitute in these assumptions when using the rule UE. We have chosen to 
substitute 0” for x and 0 for y in axiom Q5 (i.e. assumption 2) because the 
resulting formula (on line (4)) ‘reduces’ the term (0" + 0’) (which occurs on the 
left-hand side of the formula we are trying to derive) to (0" + 0)’. Now axiom 
Q4 (i.e. assumption 1) provides us with a more useful expression for the term 
(0" + 0) (see line (5)), namely 0”, and line (6) is the result of replacing (0" + 0) 
by 0" in line (4). (This is a correct use of the rule SR, for let $ be the formula 
(0" + 0’) = x", z, the term (0" + 0) and x, the term 0". Then the formulas on 
lines (4) and (5) are #(t,/x) and x, = c, respectively, so the rule SR allows us to 
derive $(t,/x), which is the formula (0” + 0’) = 0”.) 


For formulas involving larger numbers, more reductions (i.e. uses of Q5 or Q7) 
will be needed before we can use the first recursive equation (i.e. Q4 or Q6), as 
the following example shows. 


Fo(2--2)- 4, ie Fo (0" 40") - 977. 


Proof 

1 (1) Vx (x+0)=x Ass 

2 (2) Vx Vy (x y) = (x+y) Ass 

2 (3) Vy (0 y) = (0 + yy UE, (2) 

2 (4) (0" + 0") = (0" + 0y' UE, (3) 

2 (5) (0" + 0°) = (0" + 0) UE, (3) 

2 (6) (0" + 0”) = (0" + 0)" SR, (4), (5) 
1 (7) (0” + 0) = 0" UE, (1) 
1,2. (8) (07 + 0”) = 07 SR, (6), (7) 
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Notice the reductions here. Line (4) expresses (2 -- 2) in terms of (2 4- 1) and 
line (5) expresses (2 + 1) in terms of (2 + 0), both using the property of axiom 
Q5. Then the property of axiom Q4 is used in line (7) to express (2 + 0) in 
terms of 0 and '. Lines (6) and (8) make the necessary ‘substitutions of equals 
for equals’ using the rule SR. B 


Proofs of formulas similar to the above involving the multiplication symbol are 
necessarily more complicated. This is because in reducing a term using axiom 
Q7 an addition symbol is introduced, and this must be eliminated using axioms 
Q4 and Q5 as above before we can make further reductions using Q7. Here is an 
example of such a proof. 


Fo(L:2)-2, ie. Fo (0*0) =0". 


Proof 

1 (1) Vx (x +0) =x Ass 

2 (2) Vx Vy (x + y') = (x + yy Ass 

3 (3) Vx (x°0)=0 Ass 

4 (4) Yx Vy (xy) = (Gc y) + x) Ass 

4 (5 Vy (0°-y’) = ((0"-y) + 0°) UE, (4) 

4 (6) (0'-0") = (0-0) 4- 0") UE, (5) 

2 (7) Vy ((0°- 0°) + y’) = (0-0) + y) UE, (2) 

2 (8) (0-0) + 0’) = ((0'- 0") + 0) UE, (7) 

1 (9) ((0'-0*) + 0) = (0'- 0") UE, (1) 

1,2 (10) ((0"- 0") + 0°) = (0-0) SR, (8), (9) 
12,4 (11) (0'-0")=(0'-0') SR, (6), (10) 
4 (12) (0°: 0") = ((0'-0) + 0") UE, (5) 

2 (13) — Vy ((0°- 0) + y’) = ((0'*0) + yy UE, (2) 

2 (14) ((0"- 0) + 0’) = ((0°- 0) + 0)’ UE, (13) 

1 (15) ((0"- 0) + 0) = (0-0) UE, (1) 

12 (16)  ((0'-0)-- 0) = (0-0) SR, (14), (15) 
1,2,4 (17  (0-:0)- (0-0) SR, (12), (16) 
1,2,4 (18  (0:0')-(0'-0)" SR, (11), (17) 
3 (19) (0-0)=0 UE, (3) 
1,2,3,4 (20) (0’-0") =0” SR, (18), (19) 


Since the assumptions on lines (1), (2), (3) and (4) are all axioms of Q this proof 
does indeed show fg (1:2) — 2. 


The proof looks rather complicated, but as we stated above it can be broken 
down into a few basic steps. Thus, on line (6) we make the obvious reduction of 
the term (0'- 0") using axiom Q7, but this introduces an addition symbol. We 
eliminate this symbol in lines (7)-(11), so that on line (11) we have 1*2 
expressed in terms of 1:1. We now repeat this procedure with the term 1*1 and 
express it in terms of 1*0 (line (17)). We now make the necessary substitution 
to obtain 1*2 expressed in terms of 1*0 on line (18), and complete the proof 
using Q6 (the first recursive equation for multiplication) which tells us that 

1:0 — 0. 


Establish the following: 

(i) to @+1)=1, ie tg 04+0')=0' 

Gi) Fo 0--1)z1, ie. Fg— (0 +0’) 2 0. (Hint: You will need axioms Ql 
and Q2 as well as Q4 and Q5.) 

(ili) kg (1:1)=1, ie. Fg(0-0')-90'. 


QM 1 (1) Yx(x+0)=x Ass 
2 (2) Yx Vy (x+y) =(x+y) Ass 
2 (3) Vy (0 * y') 2 (0 - y) UE, (2) 
2 (4) (0+ 0’) = (0+ 0) UE. (3) 
1 (5) (0+0)=0 UE, (1) 
1,2 (6) (0+0')=0' SR, (4), (5) 
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(ii) 1 (1) Vx (x +0) =x Ass 
2 (2) Vx Vy (x * y) = (x + »yY Ass 
3 (3) (0 +0')=0 Ass 
2 (4) Vy (0 +y')= (0 +y/ UE, (2) 
2 (5) (0° 0)- (0 + 0)’ UE, (4) 
2,3 (6) (0--0y-0 SR, (3), (5) 
7 (7) Vx Vy (x =y xy) Ass 
7 (8) Vy ((0 + 0)’ =y > (0 +0)= y) UE, (7) 
7 (9) (0 4 0) =0' > (0 40) =0) UE, (8) 
2,3,7 (10) (0 + 0) — 0 Taut. (6), (9) 
1 (11) (0 +0)=0 UE, (1) 
23,7 (2) 0-9 SR, (10), (11) 
13 (13) Xx — x’ =0 Ass 
13 (14) -0 =0 UE, (13) 
1,2,3,7,13 (15) (0 =0 & —0' — 0) Taut, (12), (14) 
1,2,7,13  (16(0 + 0')=0' (0 =0 & —0 —0) CP, (15) 
1,2,7,13 (17) -(0 +0)=0 Taut, (16) 
(iii) 1 (1) Vx(x40)-0 Ass 
2 (2) Vx Vy (x y) = (x yy Ass 
3 (3) Vx (x°0)=0 Ass 
4 (4) Vx Vy (x*y') = (Gy) + x) Ass 
4 (5) Vy (0: y") = (0: y) + 0) UE, (4) 
4 (6) (0 0’) = ((0'-0) + 0°) UE, (5) 
2 (7) Vy ((0'-0) +y) = (0°: 0) + y) UE, (2) 
2 (8) ((0'-0)-- 0’) = ((0'-0) + 0)’ UE, (7) 
1 (9) ((0':0) + 0) = (0-0) _ UE, (1) 
1,2 (10) ((0°- 0) + 0’) = (0'-0)' SR, (8), (9) 
1,2,4 (11) (0-0) = (0’- 0)’ SR, (6), (10) 
3 (12) (0:0) =0 UE, (3) 
1,2,3,4 (13) (0-0) = 0’ SR, (14), (12) M 


In our last examples in this section we present proofs in the system Q of 
formulas that involve quantifiers. Our strategy is essentially to follow the 
guidelines for finding proofs set out in Unit 6, introducing an axiom of Q as an 
assumption when required to make progress. Exactly which combination of 
axioms is needed will usually be suggested by the form of the formula we are 
trying to derive. 


(Since we rarely have to use all seven axioms of Q in any particular proof, we 
do not write all of them down as assumptions at the beginning of a proof but 
rather introduce them as they are needed.) 


FoVxdy(x +y) =x 


Proof 

1 (1) Vx (x +0) =x Ass 

1 (2) (x + 0) =x UE, (1) 
1 (3) dy (x + y) =x EI, (2) 
1 (4) Vx dy (x + y)=x UI, (3) 


Recall that our strategy for deriving a formula of the form Vxó is to try first to 
derive the formula ¢. So in this case we try to derive the formula Jy (x + y) = x. 
The form of this formula then suggests we try to derive the formula (x + t) = x 
for some term t. Our arithmetical intuition suggests to us that the sensible 
choice of t is simply 0, and indeed (x + 0) =x is easily derivable from axiom 


04. 


There is a useful point to notice here. Although there is no guarantee that 
(x + 0) = x can be proved in Q—indeed you will soon see that there are some 
very simple-looking sentences true in the standard interpretation that are not 
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theorems of Q—there would be no point in trying to derive the formula 

(x + n) = x for any non-zero value of n. This is because for such an n the 
formula (x + n) = x is false in the standard interpretation however x is 
interpreted, whereas the Correctness Theorem of Unit 6 would lead us to expect 
that any formula derivable from the axioms of Q is true in the standard 
interpretation (as the axioms of Q are themselves true in this interpretation). 


Show that Fo Yx3y (x* y) = y. 
Show that Fo Vx —0 = (x + x’). 


1 a) — Vx (x0)—0 Ass 

1 2) &œ0)=0 UE, (1) 
1 (3) dy(x:y)-2y EI, (2) 

1 (4) Vx dy (x*y)=y UL, (3) 


As in Example 5, we should like to derive the formula (x- t) = t for some term 
t. Intuition suggests 0 as the sensible value of t, and indeed (x - 0) = 0 is an 
easy consequence of axiom 06. B 


1 (1) 0 — (x 4 x) Ass 

2 (2) Vx Vy (x - y) 2 (x yy Ass 

2 (3) Vy (x y) 2 (x+y) UE, (2) 

2 (4) (x + x’) = (x xy UE, (3) 
1,2 (5) 0— (xx) SR, (1), (4) 
6 (6) Vx—-0-x Ass 

6 (7) —0=(x +x)’ UE, (6) 
1,2,6 (8) (0 = (x + x)! & —0 = (x + xy) Taut, (5), (7) 
2,6 (9) (0 = (x + x) (0— (xx) & —0 = (x + x)')) CP, (8) 
2,6 (10 | -0- (xx) Taut, (9) 
26 (11) -Vx—0- (x - x) j UI, (10) 


To derive Vx —0 = (x + x'), we derive —0 = (x + x’) and use the rule UI. Since 
this latter formula begins with a negation symbol we assume the formula that 
results when this symbol is removed on line (1) and deduce a contradiction (on' 
line (8)). B 


In this section we have seen some of the sentences that are theorems of Q. By 
the Correctness Theorem of Unit 6, as all the axioms of Q are true in the 
standard interpretation, all the theorems of Q are also true in this interpretation. 
But are all the sentences which are true in the standard interpretation actually 
theorems of Q? In the next section we show that this is not the case. 


Non-standard Interpretations of Q 


As promised in Section 7.1, we now produce a sentence which is true in the 
standard interpretation but is not a theorem of Q. One such example is the 
sentence Vx x’ # x. Clearly this sentence is true in the standard interpretation 
but we shall show below that it is not the case that Fg Vx x' # x. The technique 
we use is based on the Correctness Theorem of Unit 6. Applied to the present 
situation, this theorem tells us that if it were the case that Fo Vx x' # x, then in 
every interpretation in which the sentences Q/—Q7 are true, the sentence 

Vx x' # x would also be true. Thus, to show that it is not the case that 

Fo Vx x’ # x, we have only to produce an interpretation in which all the 
sentences Q1—Q7 are true but in which the sentence Vx x’ Æ x is false, and this 
we now do. 


Recall from Section 7.1 that an interpretation consists of a non-empty set U, the 
domain, together with three specified functions defined on U which are to be 
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the interpretations of the arithmetical symbols, ’, +, *, and a specified element 
of the set U which is to be the interpretation of the symbol 0. For the present 
case, we take U to be the set N* = N u {œ}, that is, the natural numbers 
together with one new element, œ. 0 is interpreted as 0, and the interpretations 
of ’, + and * are given by the following tables. 


x | O I. 2 n ww @ 

" 1 2 3 n+1 [n 
x+y| 0 1 n [0] 
ü I n [0] 
1 1 2 l+n o 
m m m+1 m+n [7 
[7 Oo ow TS GC um g 
x':y|O 1 2 n w 
0/0 0 0 0 0 
1 0 1 2 n w 
A 10 2 4 2n o) 
m |0 m 2m .. mn .. o 
w .0 o o wor D. siu AD. 


It is not hard to show that all the axioms of Q are true when interpreted in N* 
as described in these tables. For example, consider Q5: Vx Vy (x + y’) = (x + yy. 
To show this is true in N* we must show that for every x and y in N* the value 
of x + y' when computed using these tables is the same as that of (x + y). Now 
when x and y are interpreted as natural numbers, then (x + y’) and (x + y)’ 
have the same interpretation as in the standard interpretation and so are equal. 
Thus the only difficult case is when at least one of x or y is interpreted as c, 
but then the formula (x + y') = (x + y) will still be interpreted as being true 
since both these terms will take the value œw. For example, if we put.x = 2 and 

y = w then 


2+0'=2+@=w and (24+) =w =o. 


Now notice that w = œ, so that the sentence Vx x’ # x is false in N*. Thus we 
have shown that Vx x’ z x is not a theorem of Q. 


Verify that the remaining axioms of Q are true when interpreted in N*. (To 
verify a sentence of the form Vx Vy ... you need only check the cases when at 
least one of x or y is interpreted as c, for reasons similar to those in the Q5 
case discussed above.) 


Let N** be the interpretation with domain N** = N U {a,B} where a # fl, ie. N 
together with two new elements « and $, such that 0 is interpreted as 0, and the 
interpretations of ', + and * are given by the following tables. 
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illis 1 2 n a p 
eli 2.89 ntl a Bp 
x+y |0 1 2 n a p 
0 10 1 2 n Boa 
1 1 2 3 l+n Boa 
2 2 3 4 s Fñ s» foa 
m |m m+1l`m+42 m+n B a 
a a ap ë 
B B p- B Ba 
sro y 2 n a p 
0 0 0 SQ a B 
1 t 2 n x pf 
2 2 4 2n a B 
m |O m m .. mn .. a f 
x 0p B cu ae E UB 
B10 œ a ies D sm. 3 UR 


To find the interpretation of (x + y) or (x y) for given x and y, look in the x 
row and y column of the appropriate table. 


(i) Show that all the axioms of Q are true in N**. 


(ii) Show further that each of the following sentences is false in N** and hence 
deduce that none of them is a theorem of Q (although they are all true in 
the standard interpretation). 

(a) Vx(0+ x) =x 

(b) Vx Vy (x + y) = (y + x) 
(c) Vx(0:x)20 

(d) Vx Vy (x*y) = (yx) 


SOLUTION 1 Q1 From the table giving the interpretation of ' it is clear that different 
elements of N* do not have the same successor under this interpretation. 
So Q1 is true. 


Q2 Also it is clear from the table for ' that 0 is not the successor of any 
element of N* and so Q2 is true. 


Q3 We already know that every non-zero natural number is the successor of 
an element of N*, and since w = œ under this interpretation every non- 
zero element of N* is the successor of an element of N*. Hence Q3 is true. 


Q4 w+0=a (from the table for +) and so axiom Q4 is true in N*. 
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Q6 0:0 — 0 (from the table for -) and so Q6 is true in N* 
Q7 Ify — o and x 7 0, then both x-y' and (x-y) + x equal o. If y = œ and 
x = 0 then both x- y' and (xy) + x are 0. If x = œ then both x-y’ and 


(x-y) + x equal o, no matter what y is. Thus in all cases x :y' = (x-y) + x 
and so Q7istruein N*. B 


(i) Q1, Q2 and Q3 are true in N** by arguments similar to those in Solution 1 
above. 


04 and Q6 can be verified just by looking at the first columns of the tables 
for addition and multiplication. 


For Q5, suppose x, ye N**. If x, y e N then, as before, x + y' = (x + y) 
since addition of members of N is the same here as in the standard 
interpretation. For the other possible values of x and y, we just inspect the 
tables for successor and addition to see that the following hold: 

Ifx=a,y#a, then x+y =a — (x yy 

Ifx—-oa,y-o then x+ y' — f = (x yy 

Ifx=f,y#f, thenx c y ^ f —^ (x+y) 

Ifx—-f,y —pf, thenx * y'2a- (x * yy 

IfxeN,y-ao, then x 4 y' 2 fl ^ (x - yy 

IfxeN,y —f, then x+ y 2a- (x+ yy. 
Thus in all cases x + y' = (x + y) as required. 


The verification of Q7 is similar. 


(ii) (a) Vx (0+x) 2 x is false in N** since 0 + æ = fl # a. 
(b) Vx Vy(x - y) 2 (v + x) is false in N** since « + fl. =a z f — f +a. 
(c) Vx(0:x)— 0 is false in N** since 0: = g z 0. 
(d) Vx Vy (x* y) = (y* x) is false in N** sincea-B=BAa=f-o. W 


The technique we have used to show certain sentences are not theorems of Q 
(by means of the Correctness Theorem) can be used to show other results of 
interest. 


For example, let us show that the axiom Q2 is not derivable from the remaining 
axioms of Q. (Results of this sort, showing one axiom is independent of other 
axioms, are of interest when one is trying to avoid redundancy in an axiom 
system.) All we need to do, using the Correctness Theorem, is to find an 
interpretation in which Q1, Q3, Q4, Q5, Q6 and Q7 are true and Q2 is false. 


We consider the interpretation U with domain the set of all integers {..., —2, 

— 1, 0, 1, 2, ...} where the arithmetical symbols have their usual interpretation 
on this set. Now it is easy to check that Q7 and Q3-Q7 are all true in this 
interpretation as they express familiar properties of the integers. As Q2 is 

Vx 0 # x’, all we need to do to show Q?2 is false in this interpretation is to find a 
number k in the domain of U for which 0 z k’ is false in U, i.e. 0 = K' is true. 
And as the domain of U consists of all the integers and ' is interpreted as 'add 
one’, we have that 0 = k’ for k = — 1, so that there is indeed a number k in the 
domain for which 0 # k’ is false. Hence Q2 is false in this interpretation. Then 
by the Correctness Theorem, Q2 cannot be derivable from the other axioms of Q. 


Show that axiom Q6 is not derivable from the remaining axioms of Q (Q1—-Q5 
and Q7). (Hint: Make a small modification to the interpretation of 
multiplication on the set N* described earlier in this section.) 


In Section 7.2 we showed that F51 # 2 (Example 1). Show that it is not the 
case that | 1 7 2, ie. that 1 # 2 cannot be proved using the rules of Units 5 and 
6 from no assumptions. (Hint: You have only to find some interpretation in 
which 1 7 2 is false. It is actually possible to find such an interpretation in 
which the domain has only one element.) 
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We make one change to the interpretation N* described in the reading passage, 
namely, in the bottom left-hand corner of the multiplication table we change 0 
to o, i.e. we set @-0 = o rather than 0. Then this clearly interprets the sentence 
Vx x* 0 = 0 as being false (since now w-0 z 0), but the remaining axioms are 
true in this interpretation. For the interpretations of Q1—Q5 have remained 
unchanged from N* (where they were true) and we have only to check that 
x+y’ = (x: y) + x holds for x = c and y = 0 (the other cases being the same as 
before) which it does, both sides being equal to c. 


Thus Q6 is not derivable from the other axioms. Bil 


Consider the domain U consisting of just one element, 0 i.e. U — (0). Define the 
interpretation of the arithmetical symbols by 0’ = 0, 0 + 0 = 0, 0-0 = 0, and 
interpret the symbol 0 as 0. 


Then the interpretation of 1, i.e. 0’, is 0’ which is 0, and the interpretation of 2, 
ie. 0” is 0" which is 0’ which is 0. Thus in this interpretation the sentence 1 = 2 
is true, so 1 # 2 is false. Hence by the Correctness Theorem it is not the case 
that | 1 4 2. (Note that in the case of a formula provable using no 
assumptions, i.e. F y, the Correctness Theorem tells us that V is true under any 
interpretation of the non-logical symbols.) 


The Representability Theorem 


The examples given in the last section of sentences which are true in the 
standard interpretation but not derivable in the system Q show how weak a 
system it is from the standpoint of our third requirement of an axiom system in 
Section 7.1. Indeed, you may well be thinking that Q is so weak as to be useless 
for any serious purpose. In this section we discuss an important theorem which 
shows why this impression is not quite correct. The fact that this key theorem 
works for Q but not for any significantly weaker system shows why we chose to 
study this particular system of axioms. 


Recall that we showed in Section 7.2 that Fo1 ¥ 2, whereas, clearly, a one line 
proof using the rule II shows that tg 1 = 1. These are particular cases of the 
more general theorem that follows, the truth of which you may have suspected 
after working through the first set of problems in Section 7.2. 


For all natural numbers i, j: 
(i) ifi=j then tgi=j; 
(ii) fi Aj then Fgizj. 


(i) The same sort of one line proof as that of 1 = 1 will work here as follows: 
G) i-i II 
Note that this proof does not, in fact, need to use any of the axioms of Q. 


(ii) Suppose that we are given i and j with i ¥ j. Then i is the term Ox and j 
is the term 05-7. What we shall do is give a recipe for a proof of the 
formula i # j in the system Q. Given specific values of i and j we could then 


use this recipe to give a full proof of i z j. 


Let us suppose that i « j. Our formal proof would then begin with the lines 


1 (1) 0 = 0%” Ass 
i i 
2 (2) VxVy(x’=y'’>x=y) Ass 


As in Example 1 and Problems 1, 2 and 3 of Section 7.2, our aim is to 
derive a formula of the form 0 = t’ for some term « and thus arrive at a 


contradiction with the formula 0 ¥ t’ which is an immediate consequence of 
axiom Q2. 
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Our recipe is thus to continue the proof by using axiom Q1 (assumption 2 
above) and the rule UE repeatedly as in, for example, Problem 1 of Section 
7.2 until we arrive at the formula 0 = 0%:~. As i < j, the right-hand side of 
this formula is of the form «' for some térm t (explicitly t = 0-5). 

J[-i-1 
Our recipe now tells us to write the axiom Vx —0 = x’ as the next line of 
our proof, and on the following line derive the formula —0 = t’ (with t as 
above) using the rule UE. We can now use the Tautology Rule to derive the 
contradiction (0 = : & —0 = c), and the standard use of CP and the 
Tautology Rule (as in Solution 1 of Section 7.2) gives us the formula i + j as 
the last line of the proof (depending on axioms Q1 and Q2). 


If i > j the proof is almost identical. (It differs only in the need to use the 
result of Example 3 of Section 6.6 of Unit 6 that - x = y > y = x to derive 
the formula j — i from the initial assumption i — j: thereafter the recipe is as 
above, with i and j swapped throughout.) Bil 


You may also have suspected that other results in Section 7.2, such as 
Fo(2- 1) 2 3, Fo(2--2) 2 4dand Fọ(1 + 1) z 1, are special cases of general 
theorems similar to Theorem 1 above. This is indeed the case. 


For all natural numbers i, j, k such that i + j = k 
G) Foli +j)=k, 
and (i) FgVx((i+j)=x—>x =k). 


The proof of part (i) consists of a generalization of the technique we used in 
Examples 2 and 3 of Section 72 (just as in the proof of Theorem 1), but we 
omit the details, as they are rather lengthy and not particularly interesting. We 
do, however, give a proof of part (ii) on the basis that part (i) is true. 


Let us suppose, then, that i + j = k so that, by part (i), we have a formal proof 
in which the last line, line (l), say, contains the formula (i + j) = k depending on 
assumptions from Q. (In fact, only axioms Q4 and Q5 would be needed.) 


We continue the proof as follows: 


o D +i) =k 

{+1 (+1) (i+j)=x Ass 

Ql+1 (1+2) x=k SR, (D), (+ 1) 
Q (+3) (G4 j)-xox-k) CP, (I + 2) 
Q (+4) Yx(i+j)=x>x=k) UL, (I + 3) 


(For convenience, we have written Q instead of the line numbers on which the 
sentences from Q were introduced as assumptions into the proof of 
(i*j)-k) M 


If i, j, n are natural numbers such that i + j n, then. tg (i +j) z n. 


Let i + j =k, so that k # n. By Theorem 2 (i) we have that Fo (i +j) =k, and 
by Theorem 1 (ii) we have that Hok # n. By using the Substitution Rule we 
may replace the term k by the term (i + j) in the formula k ¥ n, to obtain 

Fo (i +j) # n, as required. W 


We introduce some new notation to enable us to view Theorem 2 in a more 
general light. If @ is a formula and p,,..., p, are natural numbers, then 

$ (py..... Pn) is the formula obtained from $ by replacing all free occurrences of 
the variable x, by the term p,, all free occurrences of the variable x, by the 
term p», ..., and all free occurrences of the variable x, by the term pa. (As, for 
each i, p; is a natural number, we use the notational convention introduced at 


the beginning of Section 7.2 to get p; to stand for the term Or ames) 


(i) Let $ be the formula (x, + x2) = x3. Then $(2, 3, 5) is the formula 
(2 + 3) = 5. Also, $(2, 3) is the formula (2 + 3) = x3. 
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(ii) Let $ be the formula (3x; x, = (x; + x2) & x, = 0). Then ¢ (2, 3) is the 
formula (3x; 2 = (x; + x2) & 3 = 0), since we must replace the occurrence 
of x, (which is free) by the term 2, and all free occurrences of x; by 3. 
Only the last occurrence of x; is free and thus gets replaced by 3: the first 
three occurrences of x; are bound occurrences and so do not get replaced. 


(i) Let $ be the formula ((x;* x2) = x4 v x4 = x2). Write out in full the 
following formulas: (a) $(3, 4, 5), (b) ¢(1, 2), (c) $(0). 

(ii) Let $ be the formula x, = 0. Write out in full the formulas (a) $ (1,2), and 
(b) $(3). 

(iii) Let $ be the formula (Ax, (x;* (x4* x4)) = x4 > x4 = x4). Write out in full 
the formulas (a) $ (1, 2, 3, 4), and (b) $ (1, 2, 3). 


(i) (a) ((3°4) =5v 5-4) 
(b) (1:2) = xs v x3 =2) 
(c) (0° x2) = x5 v x3 = x2) 
(i) (a) 220, (b) x,=0. 
(ili) (a) (3x42: (1:3) = x, > 4 = 3) 
(b) (Ax4 (2: (1°3))=x,>x,=3) WI 


We can now restate Theorem 2 using our new notation, as follows. Let $ be the 
formula (x, + x2) = x3. If i + j =k then (i) tg 9 (i, j, k) and 

(ii) Fo Yx (¢ (i, j, x3) 9 x3 = k). The formal proof in (i) mirrors the fact that for 
each pair of natural numbers i and j there is some natural number k for which 

i + j = k, and the formal proof in (ii) mirrors the fact that this k is unique, so 
these two proofs together mirror the fact that addition is indeed a function 
(with domain N x N and codomain N) giving a unique value for each pair of 
values for its two arguments. A consequence of (i) and (ii) is that if i, j and k are 
natural numbers, we can prove (i + j) =k in the system Q exactly when 

i + j = k. We describe this by saying that the formula $ represents the addition 
function in the system Q (the latter part of this phrase coming from the fact that 
the formal proofs in (i) and (ii) are in the system Q). 


This gives rise to the following important definition. 


Let f be a function of n arguments, the arguments and values of f being natural 
numbers. 


The function f is representable in Q if there is a formula ¢ in which no variables 
other than x;, ..., X» X,41 occur free such that if p}, ..., p, and j are natural 
numbers with f(p,, ..., Pa) = j, then 

(i) Foó(p: .. Pa J) 
and (ii) Fo YXn+1 (Pis <--> Pw Xn+1) > Xn 41 =j). 
In this case we say that the formula ¢ represents the function f in Q. As with the 
addition function, if the formula represents the function f in Q, then for all 
natural numbers py, ..., p, and j, the formula $(py, ..., Pa, j) is provable in Q 
exactly when f(p,, ..., Pa) =J. 


As we have mentioned, Theorem 2 states that the formula (x, + x2) = x3 
represents the addition function in Q. Thus the addition function is 
representable in Q. 


In Section 7.2 we showed that tg (1:2) = 2 and Fo (1-1) = 1. These are 
special cases of the fact that if i, j, k are natural numbers and i-j = k then 

Fo (i*j) = k. Again we omit the rather tedious proof (which is just a 
generalization of the proofs of the particular cases above). However, in the same 
way as part (ii) of Theorem 2 follows from part (i), we could now show that 

Fo Vxa((i*j) = x3 > x3 = k) (assuming i-j = k). These two results show that the 
formula (x, * x2) = x3 represents the multiplication function in Q, so this 
function is representable in Q. 
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Show that the formula x; — 0 represents in Q the zero function z given by 
2(p,) = O for all pe N. 


Write down a formula which represents in Q the identity function id, given by 
id(pi) = pi for all pe N, and prove that it does represent id in this system. 


Show that if ó represents the function f in Q and f(p,, ..., p,) = j and k z j then 
Fo — ó(pi. ..., Pw K). (Hint: First show that 

=k =j, Vxn+1 ($(Pirs s Du X0) Xn+1 =]) H — (Pi, ..., pa. K), 
then use Theorem 1 (ii) and the definition of representability.) 


We must show that if $ is the formula x, = 0 and z(pı) =j then 
6) Fo bs, i) 
and (ii) Fg Vx;(ó(pi, x2) > x5 = j). 


Now if z(p,) = j, then j = 0 (regardless of which number p, is) so (Px, j) is the 
formula j = 0, i.e. 0 = 0. Also (py, x2) is the formula x, = 0, so we must show 
that (i) F90 — 0 and (ii) Fo Vx; (x; = 0 > x, = 0). The proofs are as follows: 


(i) (1) 0=0 II 

(ii) 1 (1) x20 Ass 
(2) (x2 =0-> x, =0) CP, (1) 
(3) Vx, (x, =0>x, =0) UL (2) E 


The function id is represented by the formula x, = x,. We must show that if 
id(p,) — j then 

(i) Fo pi =j, 
and (ii) Fg Vx2 (py = x2 > x2 = j). 


Now if id(p,) = j then, by definition of id, p, = j, hence (i) follows from 
Theorem 1 part (i), and for (ii) we must show Fo Vx; (p, = x; > x; = pı) which 
we do as follows: 


1 (1) pp=x2 Ass 
(2) m&-b II 
1 3) »-hn SR, (1), (2) 


(4) (Pi = X%2 > X2 = pı) CP, (3) 

(5) Vx2(P1 = x2 x;— pi) UL (4) 
Note that the function id could have been perfectly correctly represented by 
other formulas, e.g. x. = x, or (xy =x, & x, = xi). In general, a function may 
be represented by more than one formula. W 


As suggested by the hint, we consider the following proof: 


1 (1) -k =j Ass 

2 (2) VXn+1 (P(P1, Di; Xn+1)>Xn+1 =Jj) Ass 

3 G) $P, «5 Pa k) Ass 

2 (4) (p... p, k)>k =j) UE, (2) 

2,3 (5) k-j Taut, (3), (4) 
12,3 (6) (k =j& —k =j) Taut, (1), (5) 
1,2 0) (6p. -Pw kK) > (K=j&—-k=j)) CP, (6) 

1,2 (8) — (Pi, ---, p». K) Taut, (7) 


Now since k # j it follows from Theorem 1 (ii) that ty —k = j. Also 

Fo VXn+1(P(P1, -<-> Pas Xn+1) > X441 = j) since $ represents f in Q and 
f(pi,..., Pn) = j. Thus both —k = j and Vx,+1 ($(py..... Pw Xn+1) > Xn+1 =j) 
can be derived from Q, and we have just shown that — $(p,...., Pa K) can be 
derived from these two formulas (and no other assumptions). Hence 

— (Pi .... pn. K) can be derived from Q (and no other assumptions), 

ie Fo — $(Pr---> Pa k). B 
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At this point it is natural to ask which functions are representable in the system 
Q. The answer is given by the following theorem, which is rather surprising in 
the light of the facts given in the previous section about how weak Q is. 


The Representability Theorem 
Every recursive function is representable in Q. 


The proof of this theorem is the substance of Chapter 14 of BJ, but we do not 
include study of its proof as part of this course. It is, however, the only part of 
the proof of Gédel’s Incompleteness Theorem (to be discussed in Unit 8) that 
we ask you to take on trust. (The reasons why we omit the details of the proof 
are essentially the tedious nature of formal proofs showing that various 
functions are representable in Q and the fact that BJ's argument requires 
showing that the class of recursive functions is the same as the class of functions 
obtainable from the identity, sum and product functions and the characteristic 
function of equality, by means of composition and regular minimization.) 


Since Q is such a weak system, it might be thought that by adding extra 
axioms to those of Q to get a system T, functions besides those that are 
recursive would become representable in T. We would, of course, define a 
function f to be representable in such a system T in the same way as we did for 
the system Q, but with the formals proofs occurring in T rather than in Q:ie.f 
is representable in Tif there is a formula ¢ such that if f(p,, ..., pn) — j then 

G) Fra, --- po i) 
and (i) FzVx,.i (Ó(py, ..., po. X1) > X44 7j 


As T includes all the axioms of Q, any formal proof in the system Q is also a 
formal proof in the system T. Thus the formal proofs in Q which show that all 
recursive functions are representable in Q also serve to show that all recursive 
functions are representable in T: 


However, rather surprisingly, no other functions can be representable in T, 
provided T'satisfies the first two requirements of an axiom system for number 
theory given in Section 7.1. In other words, we have the following theorem. 


Suppose T'is an axiom system for formal number theory such that 

(i) every axiom of Tis true in the standard interpretation and 

(ii) there is an algorithm (i.e. a Turing machine) that decides whether or not a 
formula is an axiom of T. 

Then every function which is representable in Tis recursive. 


We shall not need this theorem in Unit 8 and we do not attempt to give a 
proof. 


Notice that conditions (i) and (ii) in this theorem hold for T— Q (as we pointed 
out in Section 7.1). Combining the results of this theorem and the 
Representability Theorem we obtain: 


A function is representable in Q if and only if it is recursive. 


This remarkable theorem provides the connection between our work on 
algorithms and recursive functions in Units 1 to 4 with that on logic and formal 
proofs in Units 5 to 7. In fact we chose Q as the system of axioms to study 
because it has just enough axioms for the Representability Theorem to be true. 
It also has the advantage of consisting of a finite number of axioms (seven, in 
fact). 
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We list those things on which we may set assessment questions to test your 
understanding of the unit. After working through the unit we feel you should be 
able to: 


(i) test whether simple sentences of the formal language are true or false in a 
given interpretation; 


* (ii) construct simple formal proofs in the system Q; 


(iii) use a non-standard interpretation and the Correctness Theorem to show 
that a sentence is not a theorem of Q; 


(iv) show that a function is representable in Q (where, as a guide, the proofs 
required would be easier than that required for the addition function); 


(v) understand both what it means for a function to be representable in Q and 
the Representability Theorem. 
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Introduction 


In this final unit of the course we return to our reading of BJ. We have now 
assembled the technical machinery needed to prove some very important 
theorems. These theorems are among the most profound intellectual discoveries 
of the twentieth century. Thus you should not find it surprising if you find this 
unit hard going in places. We shall ask you to read the proofs of all the key 
theorems so that you will be convinced of their truth. However, our emphasis 
will be on the content of the theorems rather than on the details of their proofs. 


So we hope that after reading this unit you will have a good understanding of 
what these theorems tell us about the scope and limitations of mathematical 
logic and algorithmic methods. This understanding is what we shall chiefly aim 
to assess. For more details as to the sort of questions we might set on this unit, 
you should read the list of objectives at the end. 


There is a cassette tape which accompanies this unit, and which reviews 
informally the theorems in the unit. 


Gödel Numbers 


Remember that one of the two main questions with which we began the course 
was Leibniz’s Question: Is there an algorithm for deciding which statements of 
number theory are true? 


Initially, the notion of ‘algorithm’ used in this question was left informal, but 
then we made it precise in three different ways, as Turing computability, abacus 
computability, and in terms of recursive functions. By the end of Unit 4, we had 
completed the proof that these three different precise characterizations are 
equivalent. We regarded this coincidence as providing strong evidence for 
Church’s Thesis that we had succeeded in formulating a precise definition which 
was equivalent to the informal notion of an algorithm. 


We can, therefore, use any one of these formal characterizations in trying to 
give an answer to Leibniz’s question. For convenience, we shall use the idea of a 
recursive function introduced in Unit 3. There is, however, one obvious 
difficulty: recursive functions have natural numbers as their arguments and 
values, whereas Leibniz’s question refers to statements of number theory. How 
then can we use recursive functions to answer Leibniz’s question? 


‘Statements of number theory’ will be interpreted as meaning sentences of the 
formal language for number theory which we introduced in Unit 5. To be able 
to bring in recursive functions, we shall need to be able to represent these 
expressions of our formal language by natural numbers. This representation of 
expressions by numbers is called gódel numbering and is explained in the first 
reading passage. It turns out that this numbering has a second, more subtle, use 
which we discuss in the next section. 


READ BJ pages 170 and 171. 


(i) Page 170, lines 17-25 
This paragraph refers to the second use of gódel numbering which we 
mentioned above and will be more clearly understood after you have 
worked through Section 8.2. 

(ii) Page 170, lines —2, —1 
BJ's system of gódel numbering allows for languages which have more 
non-logical symbols than are needed for number theory. So BJ allows for a 
whole stock, fẹ, f?, ..., of symbols for constants, and stipulates that the 
only constant symbol of our language, 0, is identified with fo. Similarly, 
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for each k, BJ allows for a whole stock, JEJE ..., of k-ary function 
symbols, and identifies ' with fj, + with f and - with fê. Also, BJ allows 
for a whole stock of symbols representing relations between terms. Our 
language has just one such symbol, =, which BJ identifies with Ab. 

Page 171, Tables 15-1 and 15-2 

To make things clearer, we give a table showing the godel numbers (gns) 
of just those symbols which occur in our formal language for number 
theory. 


Symbol ( ) & v > e — 3 v 0 
gn 1 2 3 39 399 399 39999 4 49 6 


Symbol + + . = x y A 


gn 68 688 6889 788 5 59 599 
A 


The formula 3x y = (x + x) is assigned a gódel number by writing under each 
symbol its number and then stringing these numbers together: 

J X y = ( x + x) 

4 5 59 788 1 5 688 5 2 
and hence this formula has gódel number 45597881568852. E 


Conversely, given a number it is not difficult to ‘decode it to discover which 
string of symbols, if any, it represents. The given number can be split up easily 
into blocks representing individual symbols since these blocks can only begin 
with the digits 1, 2, 3, 4, 5, 6 and 7 and, moreover, these digits always begin new 
blocks. The decoding process is illustrated by the following example. 

39999 59 


49|51]459 RAM d abd Dd 


V Ixl3|y (5.1096 x|) 
Given the number in the top line, the decoding process shows it is the gódel 
number of the formula Vx Jy —y = (x* x). 


Find the gódel numbers of the following formulas. 
(i) z-((v0") + x) 
(ii) Vx(x20 ox-0) 


(i) 19597885399678862 
(ili) 495578852 


(i) 5997881159688966868268852 
(i) 49515687886683999578862 Wl 


(i) (z20vz20) 

(ii) This is not the gódel number of a formula. It begins with the block 19 
which is not the gódel number of any symbol of our language. 

(iii) Although the string Vx x = x) corresponds to the gódel number, the string 
is not a formula. BI 


From working through these problems it should be clear that the system of 
gédel numbering does meet the requirements specified in the second paragraph 
of BJ, page 170. It is not the system used by Gédel in his original paper, but 
since it meets these three requirements it does just as well. 
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Gódel's Diagonal Lemma 


In the standard interpretation, the formulas of our language are interpreted as 
expressing properties of numbers. Now that we have assigned gódel numbers to 
the expressions of our language, formulas which express properties of numbers 
can be reinterpreted as expressing properties of formulas. Consider, for example, 
the formula A given by 


dy x = ((00* y) + 2). 


In the standard interpretation, A expresses the fact that x has remainder 2 when 
divided by 10; in other words, that the last digit of the decimal representation of 
x is a 2. A gódel number has this property if and only if the formula it 
represents ends with the symbol ). Thus we can reinterpret A as expressing ‘the 
formula with gn x ends with the symbol Y. 


In this way, a formula can be interpreted as referring to other formulas. So the 
possibility exists of constructing a formula which refers to itself—a 
mathematical equivalent of paradoxical sentences in English, like ‘this sentence 
is false’. This ‘self-reference’ is a key idea in the proofs of the theorems in this 
unit. The next reading passage deals with the first step in the construction of a 
self-referring formula. 


READ BJ page 172, line 1 to page 172, line 12. 


Let A be the formula 3y x = ((10* y) + 2) given above. Remembering that 10 is 
an abbreviation for 0°" and 2 is an abbreviation for 0", we see that the 
gódel number of A is 


4595788116686868686868686868686889592688668682. 


Let us call this number n, for short. Then "A? is the term which represents 
this number in our language and thus consists of the symbol 0 followed by no 
occurrences of the symbol '. 


The diagonalization of A, that is the formula 3x (x = "A? & A), is 
ax (x = ny & 3y x = ((10- y) + 2)). 


In the standard interpretation, this says that the number n, has the property 
expressed by the formula A, and this property was that of being the gódel 
number of a formula which ends with the symbol ). Since n is the godel 
number of A, it follows that the diagonalization of A expresses ‘the formula A 
ends with the symbol y. O 


In this particular case, the diagonalization of A happens to be true under the 
standard interpretation, but in general this need not be the case. If we use 
instead the formula — A with A as above, the diagonalization of — A expresses 
‘the formula — A does not end with the symbol )’, and this is false. 


In some other books, the diagonalization of A is defined by simply substituting 
"A? for the free occurrences of x in A to get the formula A(‘A?). Although this 
formula looks simple, its gódel number is much harder to calculate than that of 
the formula in BJ’s definition, and this would affect subsequent proofs. 
However, the two definitions yield equivalent formulas. This result is contained 
in the following lemma. If you want some more practice in proving formulas in 
quantifier logic as described in Unit 6, try to prove the lemma yourself before 
reading our proof. 


For each formula A and each number n, + (4x (x =n & A) e A(n)). 
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[Notice that the formula (¢ e») is a tautological consequence of the formulas 


($ > V) and (y  $).] 


1 (1) 
2 (2) 
2 (3) 
2 (4) 
2 (5) 
1 (6) 
(7) 
8 (8) 
(9) 
8 (10) 
8 (Il) 
(12) 
(13) 


If G is the diagonalization of the formula F, 


dx (x =n & A) 
(x =n & A) 

A 

x-n 

A(n) 

A(n) 

(3x (x =n & A) > A(n)) 
A(n) 

n-n 

(n =n & A(n)) 
Jx (x =n & A) 


(A(n) > 3x (x =n & A)) 
(3x (x =n & A) © A(n)) 


Taut, (7, (12) M 


F (G e F (‘F’)). 


Use Lemma A, letting A be F and n the gódel number of F. Then 
3x (x = n & A) becomes G and A(n) becomes F('F^). W 


The next Lemma deals with a similar result of a more complicated kind, which 
we shall need later in this section. We include its proof for the sake of 
completeness, but if you are short of time you should omit reading it. 


For all formulas A, B, G, 
(G Ay (A(n,y) & B(y)), Vy (A(ny) &y =k) F (GIy (y =k & B())). 


1 (1) 
2 (2) 
2 (3) 
4 (4) 
5 (5) 
25 (6) 
25 (7) 
24 (8) 
2 (9) 
10 (10) 
11 (11) 
11 (12) 
11 (13) 
11 (14) 
2 (15) 

(16) 
211 (17) 
211 (18) 
240 (19) 
2 (20) 
2 Q1) 
L2 (Q2) 


(G € Jy (A(n, y) & B(y)) 
Vy (A(n, y) & y =k) 
(A(n, y) & y =k) 
dy (A(n, y) & B(y)) 
(A(n, y) & B(y)) 
(y =k & B(y)) 
dy (y =k & B(y)) 
dy (y =k & B(y)) 
(3y (A(n, y) & B(y)) 
> dy (y =k & B(y)) 
dy Y =k & B(y)) 
Q =k & B(y)) 
Biy) 
y=k 
B(k) 
(A(n,k) Ok = k) 
k=k 
(A(n,k) & B(k)) 
3y (A(n, y) & B(y)) 
Jy (A(n, y) & B(y)) 
(dy (y =k & B(y)) 
> Jy (A(n,y) & Biy))) 
(Jy (A(n,y) & B(y)) 
ody (y=k & B(y)) 
(G > Jy (y =k & Biy))) 


Ass 

Ass 

UE, (2) 

Ass 

Ass 

Taut, (3), (5) 
EI, (6) 

EH, (7) 


CP, (8) 

Ass 

Ass 

Taut, (11) 
Taut, (11) 
SR, (12), (13) 
UE, (2) 

II 

Taut, (14), (15), (16) 
EI, (17) 

EH, (18) 


CP, (19) 


Taut, (9), (20) 
Taut, (1), (21) MI 


READ BJ page 172, line 13 to page 172, line — 7. 
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(i) Page 172, line 16 
um is an abbreviation for ‘the least m such that’. So the length function, Ih, 
is defined using minimization. This minimization is not quite in the form 
that we used in Unit 3. However, by copying the method used in Unit 3, 
Section 3.3, Problem 3, we can easily rewrite the definition of Ih in 
standard form as follows. 


Let f be the function given by f(n, m) = (1 + m) + ((n + 1) = 10"). Clearly f 
is recursive. Also 
f(n m)-0 <= 1+m=0 and (n+ 1)=+10"=0 
< l<m and n+1< 10" 
< O<m and n<10" 
So Ih(n) = the least m such that f (n, m) = 0. That is Ih = Mn[f ]. Thus Ih 
is recursive. 
(ii) Page 172, lines 21-24 
Another example might help. Take, for example, m = 49 and n = 1879. 
Then 1h(n) = 4 and so 
m*n— m: 10% + n = 49-10* + 1879 = 490000 + 1879 = 491879. A 


Show that there is a recursive function, neg, such that if n is the gódel number 
of a formula A, then neg(n) is the gódel number of its negation, — A. 


Show that there is a recursive function, conj, such that if m, n are the gódel 
numbers of the formulas A, B, then conj(m,n) is the gódel number of their 
conjunction (A & B). 


= A 
39999 n 


If the gódel number of A is n, the gódel number of — A is 39999 « n, So define 
neg(n) = 39999 » n. As » is recursive, neg is also recursive. Ml 


( A & B ) 

1m 3n 2 
If the gódel numbers of A, B are m, n, the gódel number of (A & B) is 
Ve (m (3: (n = 2))). So define conj(m,n) = 1 * (m * (3 * (n 2))), and as + is 
recursive, so is conj. W 


We shall need the result of the following problem for our next reading passage 
from BJ. 


Suppose the formula A(x,.x;) represents the function f of one argument in an 
axiom system T. 


Show that for any number p,, if f(p,) = Pa then Fr Vx; (A(p,, x5) © x, = py). 


From the definition of ‘representable in T’ in Section 74 of Unit 7, we have that 
if f (p,) = p; then 

G) Fy A(Py, P2), and 

(i) Fr Yx, (A(p,, X3) > X, = py). 

We shall show that 


A(P1, P2) Vx; (4(p,, X2) > X2=P2) Ft Vx, (A(py, x;) ^ X, = P2) 


as follows: 
1 (1)  A(Pı; pz) Ass 
2 Q) Vx;(A(puxj) > x2 = P2) Ass 
2 G) (APh X2) > x2 = p) UE, (2) 
4 (4) x. =p, Ass 
1,4 (5) A(Py, x2) SR, (1), (4) 
1 (60 (x2 =p > A(pı, x2)) CP, (5) 
L2 (7) (A(Pi, x2) x2 = p2) Taut, (3), (6) 
1.2 (8) Vx, (A(pi. X2) © x; = p2) UI, (7) 
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As both the assumptions in force on line (8) of the proof are theorems of T (by 
hypothesis in (1) and (ii) above), we have that 


FrVx,(A(p,x;—x,—p,. M 


We have seen that if the formula B (we previously used A) cán be interpreted as 
saying that the formula with gódel number x has a certain property, then the 
diagonalization of B can be interpreted as saying that the formula B itself has 
that property. We have not yet, however, achieved self-reference since the 


+ diagonalization of B is different from the formula B itself. Gödel showed that by 


using a clever trick it is possible to construct a formula G which is logically 
equivalent to the formula B(G”) which expresses ‘the formula G has the 
property expressed by B’. In this sense, G expresses ‘this formula has the 
property expressed by B' and so G refers to itself. 


The lemma which embodies Gédel’s idea comes in the next reading passage. 
Although it is rather difficult to understand the trick used to achieve self- 
reference, we feel you should be able to follow the proof line by line. In any 
case, the important thing is that you remember what the lemma says. Relatively 
informally the lemma and its proof are as follows. 


BJ Lemma 2. The Diagonal Lemma 


Let Tbe a theory in which the function diag is representable. (Following BJ, in 
this unit we use theory to mean axiom system.) Then given any formula B(y) 
with one free variable y, we can find a corresponding sentence G such that 


Fr (G > B('G?)), 
ie. such that G is equivalent to the expression resulting from substituting its 
own gódel number into B. 


Informal Proof 

(i) Define F(x) to be Jy (y = diag(x) & B(y)). (Needless to say we require a 
formal equivalent of y = diag(x) in a proper proof.) 

(ii) Define G to be the diagonalization of F, ie. G is 3x (x = 'F^ & F). 


(iii) By our Corollary A, + (G > F('F^)), so from the definition of F(x) we 
have that 


F (G e Jy (y = diag(' F^) & B(y))). 
But G is the diagonalization of F, so that the y above which among other 


things appears in the sub-formula v = diag (F^), can be replaced by "G^. 
Our Lemma B permits us to conclude that +, (G > B('G’)). 


READ BJ page 173, line 4 to page 173, line — 12. 


(i) Page 173, lines 6 and 7 
In this unit, we are interested in all axiom systems for formal arithmetic, 
not just the system Q. The phrase "language of T^ should thus simply be 
interpreted as being our language for formal arithmetic, although in 
practice the lemma applies to other languages. 

(ii) Page 173, line 9 
Here and later BJ drops brackets from formulas where it is felt that no 
ambiguity will arise. 

(ii) Page 173, lines 10 and 11 (first two lines of the proof) 
This follows from Problem 3 above, using x, v instead of x,, x2, and n,k 
instead of p,, po. 

(iv) Page 176, lines 15-18 
By Corollary A, + G €» F('F"). Since F is the formula Jy (A(x, y) & B(y)) 
and the gódel number of F is n, this can be written as 
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F(G e dy(A(n, y) & B(y))). Since this equivalence can be derived using 
no assumptions at all, it is certainly derivable in the system T. This is the 
assertion on line 18. 


(v) Page 173, lines 21-23 
Line 21 uses just the fact that diag is representable in T. As this 
representability relies on formal proofs in the theory T, it is at this stage of 
the argument that the axioms of Tare really needed. 
The equivalence on line 22 follows from those on lines 18 and 21 using our 
Lemma B. 


An application of our Lemma A shows that 
Fr Gy (y =k & B(y)) e B(k)). 


This, together with the equivalence on line 22, yields the result 
Fr(G > B(k)) on line 23 using the tautology 


(Od) &($ y) (0e) A 


We shall begin to exploit Gódel's Diagonal Lemma in the next section. 


The Answer to Leibniz's Question 


We are now in a position to prove a series of remarkable and important 
theorems, one of which gives an answer to Leibniz's question. We first require 
the definitions of some concepts needed in the proof of these theorems. 


A theory (or, indeed, any set of sentences) T'is said to be consistent if there is no 
formula A such that both +, A and +, — A. 


If T were not consistent, so that a formula A as above did exist, we could use 
the tautology rule with the tautology ((4 & — A) — B), which holds for any 
formula B, to show that Hy B: ie. if T is not consistent, every formula is a 
theorem of T. Thus if there is a formula which is not derivable in T; then T must 
be consistent. Conversely, if T is consistent, then given a formula A at least one 
of the two formulas A and — A cannot be a theorem of T. Thus we have the 
result 


T is consistent if and only if there is some formula which is not a 
theorem of T. 


A set of sentences Tis said to be satisfiable if there is an interpretation under 
which all the sentences in T are true. 


If T is satisfiable then T is consistent, as follows. Suppose not, so that although 
Tis satisfiable there is some formula A for which both +, A and +, — A. Then, 
by the Correctness Theorem of Unit 6, under the interpretation in which the 
sentences of Tare true we must have that both A and — A are true. But for any 
formula A we cannot have both A and —A true under the same interpretation. 
Hence the result. (It can be shown, conversely, that if Tis consistent then Tis 
satisfiable. A proof of this is given in BJ Chapter 12, but it is beyond the scope 
of this course.) 


READ BJ page 173, line —7 to page 174, line 8. 


(i) Page 173, line —5 
The symbol ¢ means ‘does not belong to’. 

(ii) Page 173, lines —4 to —1 
Examples 1 to 3 below are intended to make the idea of a definable set 
clearer. kRn means that it is not the case that kRn. 
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(iii) Page 174, lines 4-6 
As the axioms used in the formal proofs needed to show that a function f 
is representable in S are also axioms of any extension theory T, the same 
proof shows that fis representable in T A 


Let B(x) be the formula (x = 0 v x = 1). Then B(x) defines the set {0,1} in the 
theory Q. Since, by II, ty 0 = 0, a use of the Tautology Rule gives 
Fo (0 = 0 v 0 = 1); similarly, tg (1 = 0 v 1 = 1); so we have Fo B(0) and tg B(1). 


, Thus 


(i) if ke{0,1} then Fg B(k). 


Conversely, suppose k ¢ (0,1). Then k # 0 and k 4 1. So by Theorem 1 of Unit 
7, Section 74, Hok # 0 and Hok #1, whence, using the Tautology Rule, 
Fo -(k-0vkc-1) ie. ty — B(k). Thus 


(ii) if k¢ {0,1} then ty — B(k). 
(i) and (ii) are the two facts we need in order to establish our claim that the 
formula B(x) defines the set {0,1} in the theory Q. 


Let B(x) be the formula Sy y + y = x. Then B(x) defines the set 0 = {0,2,4,...} 
of even natural numbers in Q. It is not difficult to show that (i) if ke @ then 

Fo B(k), but the proof that (ii) if k¢@ then Fo — B(k), is rather difficult and so 
we omit it. 


Let B(x,y) be the formula 3z z + x = y. B(x,y) defines the relation < in Q. 
Again the proof of this is difficult and so omitted. O 


The Lemma in the next reading passage gives our first application of Gódel's 
Diagonal Lemma (used on BJ page 174, line 18 with the formula — C(y) in 
place of B(y) in the statement of the lemma). This is the key use of self-reference 
in the course, and the argument used in the proof of the lemma is discussed 
informally on the cassette tape accompanying Section 8.6. 


READ BJ page 174, line 9 to page 174, line — 11. 


BJ's argument is a proof by contradiction. To show that the set 0 of gódel 


‘numbers of theorems of Tis not definable in T; we assume, on the contrary, that 


it is defined in T by the formula C(y) and then deduce that both Hr G and 
Fr— G, which contradicts the assumption that Tis consistent. 


The formal proofs in Tof G and —G require tautologies which BJ does not 
mention explicitly. From +, (G — — C(k)) and F;. — C(k), BJ deduces that H; G. 
This deduction uses the tautology ((($ = —) & —wy) ¢). From 

Fr (G  — C(k)) and +, C(k), BJ deduces that H} — G. This uses the tautology 


((6 e —wv)&y)^5-9. A 


In Section 4.1 of Unit 4 we defined the characteristic function of a condition. In 
a similar way we define the characteristic function, f, of a set 0 of natural 
numbers by 


_ fo ifké0, 
mo-p if ke 6. 


(Actually this is precisely the characteristic function of the condition 'ke0*.) We 
say that the set 0 of natural numbers is recursive if its characteristic function is 
recursive. 


The first major theorem of this section tells us that certain sets are not 
recursive. It is an important step towards the answer to Leibniz's question. 


READ BJ page 174, line — 10 to page 175, line — 15. 
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(i) Page 175, proof of Theorem 1 
We can summarize the three steps in the proof as follows: 
(a) if T is a consistent extension of Q then the set of gódel numbers of 
theorems of Tis not definable in T: 
(b) if the characteristic function of a set is representable in T, then the set is 
definable in T: 


(c) if the characteristic function of the set of gódel numbers of theorems of 
T were recursive, then it would be representable in T. 


Step (a) is just the content of Lemma 3 of BJ page 174. Step (c) follows 
from the Representability Theorem of Unit 7, Section 7.4. All, then, that 
there is left to do is to prove (b). BJ does this in the remark in parentheses 
on lines 11-13 of page 175. We spell out this argument in more detail as 
follows. 


Suppose that the characteristic function, f, of the set 0 is represented in T 
by the formula A(x,y). Then if f(k) = n we have, by Problem 3 of Section 
82, that Fr Vy (A(k, y) & y = n). Now suppose ke0. Then f(k) = 1 and 
hence Hr Vy (A(k, y) &y = 1). So by UE, Hr (A(k, 1) 61 = 1). But, by II, 
Fr 1 = 1 and so, using the tautology ((( V) & y) — $), it follows that 
Fr A(k, 1). Thus we have shown that 

(i) ifke6, then Hr A(k, 1). 
Next suppose k £0. Then f(k) = 0 and hence Hr Vy (A(k,y) y = 0). So by 
UE, Fr (A(k, 1) 51 = 0). But, by Theorem 1 of Unit 7, Section 7.4, Fr 
1 # 0 and so using the tautology ((( V) & —w)— — $) it follows that 
Fr — A(k, 1). Thus we have also shown that 


(ii) ifké0, then +; — A(k, 1). 
(i) and (ii) are the facts we need to establish in order to prove that the 
formula A(x, 1) defines the set 0 in the theory T. 
(ii) Page 175, line — 15 
All the axioms of Q are true under the standard interpretation, so Q is 


satisfiable. Thus Q is consistent (by the remarks following the definition of 
satisfiable on page 92 of this section. A 


We are now in a position to give an answer to Leibniz's question. 


By arithmetic we shall mean the set of all sentences of our formal language (i.e. 
using the symbols 0, ’, +, -) which are true in the standard interpretation. 


READ BJ page 176, line 17 to page 176, line — 8. 


Page 176, line 19 

All the sentences of arithmetic are true in the standard interpretation, so that 
arithmetic is satisfiable. Thus arithmetic is consistent, by the remarks following 
the definition of satisfiable. As all the axioms of Q are true in the standard 
interpretation, arithmetic is an extension of Q. A 


BJ Theorem 3 tells us that the answer to Leibniz’s question is ‘no’. There is no 
algorithm for determining whether an arbitrary sentence of our formal language 
for number theory is true under the standard interpretation. Of course, in many 
cases we can decide that a particular sentence is true, but BJ Theorem 3 says 
that there is no algorithm which works in general. 


In one sense, this answer is very disappointing. An algorithm, if it existed, would 
enable us to settle all the outstanding questions of number theory in a routine 
way. On the other hand, it is comforting to know that mathematicians cannot 
be replaced by computers. 
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Let us look more carefully at arithmetic, i.e. the set of all sentences of our 
formal language true in the standard interpretation. BJ Theorem 3 (page 176) 
tells us that this set is not decidable. The question arises as to whether there is 
some decidable set of sentences which, when taken as a set of axioms, yields 
arithmetic as its theory. 


A set of sentences T' is axiomatizable if there is a decidable set of sentences that 
can be taken as axioms for a system whose set of theorems is T. 


Note the distinction between an axiomatizable theory and an axiom system. The 
former has a decidable set of axioms while the set of axioms of the latter may or 
may not be decidable. 


Our question above, which this section is devoted to answering, can now be 
phrased as: is arithmetic axiomatizable? The fact that arithmetic is not 
decidable (BJ Theorem 3, page 176) does not rule out the possibility that this 
set is axiomatizable. After all, we know that the theory of the system Q is also 
not decidable (by Lemma 4 of BJ page 175) but it is axiomatizable, because Q 
has a set of axioms which is finite, and hence certainly decidable. 


We also know that Q does not provide an axiomatization of arithmetic that is 
complete in the sense that all the sentences which are true in the standard 
interpretation are provable from its axioms. We discovered in Unit 7, Section 
7.3, that there are such true sentences which are not theorems of Q. However, 
much stronger axiom systems for formal number theory are known. One such is 
discussed in the next section, and by 1930 considerable evidence had 
accumulated which pointed to its being a complete axiomatization. Thàt is why 
Gédel’s discovery that no such complete axiomatization exists came as a shock. 


The system Q is an example of a theory which is not decidable: in other words, 
the gódel numbers of the theorems of Q do not form a recursive set. We begin 
by showing that the set of gódel numbers of the theorems of an axiom system 
does have a weaker but related property which we now explain. 


A set 0 of natural numbers is said to be recursively enumerable if it can be 
expressed in the form 

0 = (f(0,/0)/Q)...] 
where f is a recursive function. In other words, a set is recursively enumerable if 
it is the range (set of values) of a recursive function. Note that our notation is 
not intended to imply that f (0), f (1), f (2), ... are all distinct, so, as shown by 
the examples below, a recursively enumerable set can be finite. (It is-also 
convenient to adopt the convention that the empty set counts as being 
recursively enumerable, but this will not concern us in this course.) 


It follows that a set is recursively enumerable if and only if there is an algorithm 
for enumerating (or listing) its members. (There is a difference between a 
recursive set and a recursively enumerable set, as you will see later.) 


The set {0} is recursively enumerable. The zero function, z, is recursive and since 
for all n, z(n) = 0/ the range of values taken by z consists of just the set {0}. 


The set {0,1,4/9,...' of perfect squares is recursively enumerable. The 
function f defined by f (n) = n? is recursive and its range of values is the set of 
perfect squares. 
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We give an informal argument to show that the set of numbers whose decimal 
representations occur as consecutive digits somewhere to the right of the 
decimal point in the decimal expansion of z is a recursively enumerable set. As 
z = 3.14159 ... this set includes, e.g. 5 (coming from the underlined part of 
3.14159) and 415 (coming from the underlined part of 3.14159...). There are 
well known series expansions which enable us to calculate the decimal 
expansion of z as far as we like. We can use this expansion to enumerate all 
finite sequences of digits which occur in this expansion after the decimal point, 
as follows. 


Step 1 x = 3.1..., thus the list begins {1,...}. 

Step 2 1 — 3.14..., thus we add to our list the sequences 4 and 14 so that it 
now is (1, 4, 14, ...}. 

Step 3 n = 3.141 ..., thus we add to our list the sequences 1, 41 and 141 so that 
it now is (1, 4, 14, 1, 41, 141, ...] (illustrating again the point that the 
numbers in the list need not be distinct —here the sequence 1 appears 
more than once in the list). 

and so on. 


Since we have an algorithm for calculating the decimal expansion of x as far as 
we like, we have an algorithm which enables us to continue this list as far as we 
like. The set, 0, of all the numbers which occur in this list, is thus a recursively 

enumerable set. 


Notice that in Example 3 we gave only an informal argument to show that 6 is 
a recursively enumerable set. We did not actually construct a recursive function 
whose range is 0, as would be required to give a completely rigorous proof. To 
avoid technical complications we shall stick to informal arguments in what 
follows. 


From our point of view, the most important examples of recursively enumerable 
sets are given by the following theorem. 


Let T'be an axiom system for formal arithmetic with a decidable set of axioms. 
Then the gódel numbers of the theorems of T form a recursively enumerable set. 


In Unit 1, Section 1.1, we showed that if we have an ‘alphabet’ consisting of a 
finite set of symbols, then the set of all finite strings of these symbols forms an 
enumerable set. Furthermore, there is an algorithm for enumerating it, namely, 
first list all the one-letter strings in alphabetical order, then list all the two-letter 
strings in alphabetical order, and so on. 


In writing down formal proofs of our system we use only a finite set of symbols. 
These are the symbols of our formal language together with the symbols used to 
write the annotations (these are just letters of the English alphabet, the 
numerals 0, 1,2....,9, and a few punctuation marks). So, as explained in the 
previous paragraph, there is an algorithm for listing all the finite strings of these 
symbols. Let the list generated by this algorithm be 


Soy Ss So, es (*) 


We stressed throughout Units 5 and 6 that there is an algorithm for 
determining whether or not a purported proof really is a legitimate proof of our 
system, and, if so, on which assumption formulas the last line of the proof 
depends. Since T has a decidable set of axioms, there is an algorithm to 
determine whether or not a formula is an axiom of T. We can then use this 
algorithm to decide whether or not the assumptions on which the last line of a 
legitimate proof depends are all axioms of T. 


It follows that we have an algorithm which enables us, as we generate the list 
(*), to discard those strings which are not legitimate proofs whose last line 
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depends on assumptions which are all axioms of T. Using this gives us an 
algorithm which generates a list 

Po. Pus Pss sus (1) 
of all legitimate proofs of which the last line depends on assumptions which are 
all axioms of T. The formulas occurring on these last lines will therefore be all 
the theorems of T. Hence, if, as we generate the list (1), we calculate and list the 
gódel numbers of these formulas, we shall enumerate all the gódel numbers of 
the theorems of T. Since this enumeration is done by an algorithm, the set of all 
these gódel numbers is recursively enumerable. Bil 


As a consequence of Theorem 1, the set of gódel numbers of theorems of the 
system Q can be recursively enumerated, in contrast with the fact that this set is 
not recursive (the content of BJ Lemma 4, page 175). (Recursively enumerable 
sets are of intrinsic interest to logicians, and the above discussion gives a proof 
of the result that there are recursively enumerable sets which are not recursive.) 


The moral to be stressed here is that the existence of an algorithm for 
enumerating the theorems of an axiom system does not imply the existence of 
an algorithm for deciding whether or not a formula is a theorem. ‘Wait and see 
if it appears in the list' is not an algorithm for giving an answer to this question. 
If a formula is a theorem then it will appear at some stage of the enumeration 
and when it appears we will know that it is a theorem. But if it is not a theorem 
there will never be a stage when we can be sure of this. The fact that a formula 
has not so far appeared in the enumeration gives us no information about 
whether it will appear later. 


There is, however, one special case where we can deduce that the theorems of an 
axiom system form a decidable set. 


The theory Tis said to be complete if for each sentence A, either +A or Fy — A. 


Arithmetic is a complete theory. By definition, arithmetic consists of all the 
sentences true under the standard interpretation. Given a sentence A, either A is 
true under this interpretation and hence is an axiom of, and thus a theorem 

of, arithmetic, or A is false under this interpretation, in which case — A is true 
and hence likewise a theorem of arithmetic. 


The theorems of a complete and consistent axiomatizable theory form a 
decidable set. 


Let T be a complete and consistent axiomatizable theory. By Theorem 1, there 
is an algorithm for enumerating the theorems of T. This algorithm produces a 
never-ending list Ao, A;, Az, ... of all the theorems of T. We describe an 
algorithm for deciding whether an arbitrary sentence is a theorem i f T. 


Given a sentence A, we know that as Tis complete, either A or —A is a 
theorem of T. Thus after a finite number of steps of the enumeration of all the 
theorems of T, one of the sentences A, — A must appear in the list as a theorem. 
There are two possibilities, depending on which of these sentences appears. 

(i) The sentence that appears in the list is A, so that A is a theorem of T: 

(ii) The sentence that appears in the list is — A. As Tis consistent we know 
that we cannot prove both — A and A as theorems of T, so that we know 
that A cannot subsequently appear in the list as a theorem of T. So in this 
case A is not a theorem of T. 


In either case the algorithm terminates with the correct answer. W 


We now come to the main theorem of the course. 
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Gódel's First Incompleteness Theorem (BJ Theorem 6, page 179) 
There is no complete consistent axiomatizable extension of Q. 


By Theorem 2 above, a complete and consistent axiomatizable extension of Q 
would have a decidable set of theorems, and this would contradict BJ Theorem 
1, page 175. So no such complete, consistent axiomatizable extension of Q 
exists. BM 


Arithmetic is not axiomatizable. 


Arithmetic is a complete and consistent extension of Q. W 


READ BJ page 179, line 15 to page 180, line 6. 


Peano Arithmetic 


Gódel's First Incompleteness Theorem tells us that we cannot find a consistent 
decidable set of axioms from which all the true sentences of arithmetic can be 
derived as theorems. In Section 7.3 of Unit 7 we gave examples of such 
sentences (i.e. ones true under the standard interpretation) that were not 
theorems of the system Q: these included such basic things as Vx x' z x and 
Vx Vy (x + y) = (y + x). Q is thus a very weak system. In this section we shall 
look at a decidable set of axioms from which we can prove somewhat more of 
the sentences true in the standard interpretation. 


If you have done any number theory, you will probably find it easy to see what 
is missing from the system Q which makes it such a weak system. One of the 
most common methods of proof in number theory is the method of 
mathematical induction, but there is nothing in the system Q which corresponds 
to this. 


The principle of mathematical induction says that for each property of numbers 
if 0 has this property, and if whenever n has the property, so also does n + 1, 
then every natural number has the property. (Since most number theorists 
regard the natural numbers as starting with 1, they would word this slightly 
differently, but in essentially the same way.) 


The axiom system we are about to study incorporates this principle in the way 
explained in the next reading passage. 


READ BJ page 182, line 1 to page 183, line 5. | 


(i) Page 182, lines 5, 6 
We explain the significance of ‘Elementary in the next note. The system is 
named after the Italian mathematician Giuseppe Peano (1858-1932) who 
first devised a system of axioms for number theory in 1889. These axioms 
were somewhat different from those which make up the system described 
by BJ. ‘Hilbert—Bernays’ is a reference to a very influential book 
Grundlagen der Mathematik (Foundations of Mathematics) published by 
David Hilbert (1862-1943) and Paul Bernays (1888-1977) in two volumes 
in 1934 and 1939. 


(ii) Page 182, lines 8-10 
The principle of mathematical induction, as we mentioned above, states: 
‘for each property of numbers ...’. In our language, properties of numbers 
are expressed by formulas, and as no symbol in our language expresses 'for 
each property’, the only way we can represent this principle is by taking 
for each formula A(x) the following new axiom 


98 


8.6 


M335 8.5/8.6 


([A(0) & Vx (A(x) > A(x’))] > Vx A 


0 has the if n has the property every natural 
property so also has n + 1 number has the 
property 


If the formula A(x) has free occurrences of variables in it other than x, we 
turn the above formula into a sentence (i.e. a formula with no free 
variables) by prefixing universal quantifiers for all the free variables other 


$ than x which occur in A(x). 


The term ‘elementary’ used to describe the theory Z is a technical one 
which refers to the fact that in the language of Z the only quantifiers we 
have are those that refer to numbers. So in the language of Z we can 
express ‘for every number’ but not ‘for every property of numbers’. 


(iii) Page 182, line 14 
By ‘logical truths’, BJ means ‘provable using no assumptions’. 


(iv) Page 182, lines —14, —13 
Although the induction axioms form an infinite set (because we get one 
induction axiom for each formula A(x)), Z is an axiomatizable theory. It 
should not be difficult to see that there is an algorithm for deciding 
whether a formula of our language has the form of an induction axiom. 
Hence the axioms of Z form a decidable set. 


(v) Page 182, lines —12 to —4 
We do not need to refer to the ‘notion of proof’ given by BJ since we have 
already introduced our own system of formal proofs in Units 5 and 6. We 
do not have the time to explore the strength of the system Z, but the 
evidence that had accumulated by 1930 certainly suggested that it might 
very well be possible to derive all true sentences within the system Z. That 
is why it was such a shock when Gódel proved his First Incompleteness 
Theorem in 1931. A 


Since any consistent axiomatizable theory T which extends Q is not complete, 
there will be at least one true sentence (i.e. a sentence true under the standard 
interpretation) which is not derivable in T. Gédel’s original proof of his First 
Incompleteness Theorem gave a method for explicitly constructing such a 
sentence given the axioms of T. Our proof, although it used essentially the same 
ideas as Gódel's, missed out some of the technical complications and as a result 
we did not construct an explicit example of a true but underivable sentence. We 
shall give one such example in the next section. 


An Answer to Hilbert's Question 


You will remember that Hilbert's question is: can the consistency of number 
theory be proved using only non-dubious principles of finitary reasoning? 


To be able to answer this question we need to make it precise in various ways. 
Firstly, by ‘number theory’ we shall mean, at least for the time being, the system 
Z of Peano arithmetic introduced in the previous section. 


Up to now we have taken it for granted that Z is consistent because all the 
axioms of Z are true in the standard interpretation. We argued thus: 


Since all our logical rules are valid, all the theorems of Z will also be true 
under the standard interpretation. Given a sentence A, it cannot be that both 
A and — A are true in the same interpretation. So A and —A cannot both be 
theorems of Z. Hence Z is consistent. 
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This argument does not meet Hilbert's requirements since it takes for granted 
the standard interpretation of number theory, and the notion of ‘truth’ in 
relation to this interpretation. But the standard interpretation of number theory 
is an infinite mathematical object and arguments which assume that we have a 
clear notion of truth for such infinite structures go beyond ‘non-dubious 
principles of finitary reasoning’. Indeed, Gédel’s First Incompleteness Theorem 
shows that the properties of this standard interpretation cannot be completely 
captured by any explicitly given set of axioms of our language. Thus our grasp 
of the structure of the standard interpretation is not as straightforward a matter 
as might be suggested by the consistency proof for Z given above. 


We can interpret Hilbert's requirement as seeking an axiom system with far 
fewer axioms than Z in which the consistency of Z can be derived. In other 
words, can we find an axiom system T such that Z is an extension of T and such 
that the sentence which expresses the consistency of Z is a theorem of T? 


This immediately raises the question of how we can find a sentence of our 
formal language which expresses the consistency of Z. The following observation 
is helpful. 


Z is consistent if and only if the sentence 0 = 1 is not a theorem of Z. 


Since 0 + 1 is a theorem of Z (by Theorem 1 of Unit 7, Section 7.4), if Z is 
consistent then 0 = 1 cannot be a theorem of Z. Conversely, if Z is not 
consistent then every formula is a theorem of Z (see the result on page 92 of 
Section 8.3). So if 0 = 1 is not a theorem of Z, then Z must be consistent. MI 


It follows that to express the consistency of Z all we need to express is ‘the 
sentence 0 = 1 is not a theorem of Z'. We could do this with the sentence 

— B('0 = 17), provided that B(y) is a formula which expresses ‘y is the gódel 
number of a theorem of Z'. The difficulty with this is that by BJ Lemma 3 
(page 174) the set of gódel numbers of the theorems of Z is not definable in Z. 
However, it is possible to construct a formula Prov(y) which has the property 


Prov(' A?) is true in the standard interpretation if and only if +, A. 


The construction of this formula Prov(y) involves a good deal of technical 
complication and so we shall not describe it. We can use this formula to restate 
Hilbert's question as follows: 


Is there an axiom system T'such that Z is an extension of T 
and +, — Prov('0 = 17)? 


We show that the answer to this question is ‘no’ by proving that if Z is 
consistent then it is not even the case that — Prov('0 = 17) is a theorem of Z, 
and so it cannot be a theorem of a system which is weaker than Z. 


Rather than prove this for the particular formula Prov(y), it is convenient to 
prove it in a more general setting which deals with any formula which might be 
considered to express the fact that formulas are derivable. BJ calls such 
formulas provability predicates. 


READ BJ page 185, line 7 to page 186, line 5, omitting page 185, lines 17-21. 


Page 185, lines 14—16 
If we think of B(' A?) as expressing ‘A is a theorem of T’, these conditions say: 
(i) if A is a theorem of T, then we can prove in T that Ais a theorem of T: 


(ii) we can prove in T that if (A — C) and A are theorems of T then C is also a 
theorem of T; 


(iii) we can prove in T that if A is a theorem of T, then we can prove in T that 
A is a theorem of TT. A 
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The theorem which finally enables us to answer Hilbert's question is a very 
ingenious application of Gódel's Diagonal Lemma. The individual steps in the 
proof are not difficult to follow; they use the Tautology Rule, which BJ does 
not mention explicitly. However, once again it is difficult to get a grasp of the 
proof as a whole. So you should not worry if you find it hard to see what is 
really going on. We. shall not expect you to remember either the theorem which 
follows in the next reading passage or its proof. We have included it in your 
reading to indicate what is involved in answering Hilbert's question. 


READ BJ page 186, line 11 to page 188, line 16.| 


It is a bit misleading to call BJ Corollary 2 Gódel's Second Incompleteness 
Theorem, which really asserts that — Prov('0 = 1?) is not a theorem of Z. To 
draw this conclusion from the Corollary we would need to prove that Prov(y) is 
indeed a provability predicate for Z. The detailed verification of this is 
complicated and so we omit it. (In missing out this step of the argument we are 
in distinguished company: Gédel’s original proof of the Second Incompleteness 
Theorem was different from the one given here, but Gédel also never published 
the proof in detail. He gave an outline of the proof in his 1931 paper and said 
that the details would be given in a subsequent paper; but this was never 
published. Following in this tradition, almost all the textbooks which give a 
proof of the Second Incompleteness Theorem just wave their hands at this stage 
of the argument.) So we just state without proof: 


Prov(y) is a provability predicate for Z. 


It is worth remarking that here we do really need a powerful system with lots of 
axioms like Z. Being a provability predicate for Z means that certain formulas 
(given in conditions (i), (ii), (iii) on BJ page 185) are provable, and for this to be 
the case, a system like Z is needed. The analogous lemma for a system with very 
few axioms like Q would not be true. 


From this Lemma we can immediately deduce: 


Gódel's Second Incompleteness Theorem 
If Z is consistent then — Prov('0 = 17) is not a theorem of Z. 


We have included the hypothesis that Z is consistent in our statement of this 
theorem since its main interest stems from Hilbert's question, and this question 
has little significance if the consistency of Z is taken for granted. However, even 
in this case the theorem is interesting. If Z is consistent, — Prov('0 = 17) is true 
under the standard interpretation, and so is an example of a true sentence which 
is not derivable in Z. 


Now we are in a position to answer Hilbert's question. Taking together the 
results of Theorems 1 and 2 we can conclude that 


if Z is consistent then we cannot prove in Z that it is consistent. 
Thus the answer to Hilbert's question is ‘no’. 


Theorem 2 applies more generally to any system with a decidable set of axioms 
which is an extension of Z, but it is important to note that the formula 

Prov(y) varies with the system being considered. If we want to prove Theorem 2 
for the axiom system Twe must take Prov(y) to be the formula which expresses 
‘y is the gódel number of a theorem of T" and the exact form of this formula 
will depend on the system T. 


There is a cassette-tape commentary on the results of this and the previous 
sections. You will find it convenient to have to hand the list of results in 
objective (iv) of Section 8.8 when you listen to the tape. 


START THE TAPE WHEN YOU ARE READY 
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In Conclusion 


We have ended this course with several negative results. The answer to both 
Leibniz’s and Hilbert's questions is ‘no’. However, our work in this course has 
positive aspects. The concepts we have had to study, especially these of recursive 
functions and axiom systems, have been very fruitful in many areas we have not 
had the space to discuss. For this reason we should like to make some 
suggestions for further reading. 


The literature of mathematical logic is very large and is still growing. 
Unfortunately, no two books use exactly the same notation and nomenclature, 
so you have to be ready to get used to different ways of presenting the same 
material. We have selected a short list of books which most appeal to us. Most 
of them will be available only in specialist libraries, but should be available 
from any library via the Inter-library Loan scheme. Also, many of these books 
are expensive, so we recommend that you do not buy any of them until you 
have been able to borrow a copy and satisfy yourself that it suits your needs. 


(a) Historical 


William and Martha Kneale's The Development of Logic (Clarendon Press, 
Oxford, 1962) is a scholarly work with a great deal of material on Greek and 
medieval logic, G. T. Kneebone's Mathematical Logic and the Foundations of 
Mathematics (Van Nostrand, London, 1963) is more technical and has a greater 
emphasis on work done this century. Jean van Heijenoort's From Frege to Gédel 
(Harvard UP, 1967) is an edited collection of classical papers written on 
mathematical logic in the period from 1879 to 1931. A translation of the paper 
in which Gódel originally proved his incompleteness theorems is included. The 
papers in this volume make difficult reading, but there are many helpful 
editorial comments. 


(b) Philosophical 

We begin with two classical books, Gottlob Frege's The Foundations of 
Arithmetic (first published in 1884 and republished with an English translation 
by J. L. Austin by Blackwell, Oxford, revised edition 1953) and Bertrand 
Russell’s Introduction to Mathematical Philosophy (Allen and Unwin, London, 
1919). A valuable anthology of various writings on the philosophy of 


mathematics is Philosophy of Mathematics: Selected Readings, edited by Paul 
Benacerraf and Hilary Putnam (Blackwell, Oxford, 1964). 


(c) Computability 

There are now a large number of textbooks dealing with recursive functions but 
none uses exactly the same notation as BJ. One of the earliest of these 
textbooks is Martin Davis’s Computability and Unsolvability (McGraw-Hill, New 
York, 1958) and one of the most recent is Nigel Cutland’s Computability: An 
Introduction to Recursive Function Theory (Cambridge UP, 1980). J. Hartley 
Rogers’ Theory of Recursive Functions and Effective Computability (McGraw- 
Hill, New York, 1967) deals with the more advanced aspects of the theory. 


(d) Basic Logic 

E. J. Lemmon’s Beginning Logic (Nelson, London, 1965) describes a formal 
system which is quite close to the one described in this course. The main 
difference is that our Tautology Rule is replaced by a number of different rules 
for the symbols &, v, =>, —. Among the many textbooks which develop 
mathematical logic as far as this course, we mention only A. G. Hamilton’s 
Logic for Mathematicians (Cambridge UP, 1978). 
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(e) Advanced Logic 


Two recently published books, which coincidently have the same title, provide 
general accounts of the directions in which mathematical logic has developed. 
These are John Bell and Moshe Machover's A Course in Mathematical Logic 
(North-Holland, Amsterdam, 1977) which is based on their London University 
MSc course, and Yu. I. Manin’s A Course in Mathematical Logic (Springer- 
Verlag, New York, 1978). 


(f) Fun 

An unusual but entertaining book which looks at formal systems, self-reference, 
and Gédel’s Incompleteness Theorems is Douglas R. Hofstadter’s Gódel, Escher, 
Bach: An Eternal Golden Braid (Harvester Press, 1979; Penguin, 1980). 


8.8 Objectives of Unit 8 


We list those things on which we may set assessment questions to test your 
understanding of the unit. After working through the unit we feel you should be 
able to: 

(i) calculate the gódel number of a formula and decode a number to get the 
formula it encodes—in an examination question you would be given the 
particular numbers assigned to the basic symbols, so there is no need to 
remember these; 

(i) write down and interpret the diagonalization of a given formula; 


(iii) use the technique of Problems 1 and 2 of Section 8.2 to show that certain 
types of function are recursive; 

(iv) explain the meaning of each of the following results (and thus of the 
words used to state them), and how they relate to Leibniz's and Hilbert's 
questions: 

Results 
(1) Gódel's Diagonal Lemma (BJ Lemma 2, page 173) 
Let T'be an axiom system in which the function diag is representable. 
Then given any formula B(y) with one free variable y, we can find a 
corresponding sentence G such that 
Fr (G e B('G?)). 
(2) BJ Lemma 3, page 174 
If Tis a consistent extension of Q, then the set of gódel numbers of 
theorems of Tis not definable in T. 
(3) BJ Theorem 1, page 175 
No consistent extension of Q is decidable. 
(4) BJ Lemma 4, page 175 
Q is not decidable. 
(5) BJ Theorem 3, page 176 
Arithmetic is not decidable. 
(6) Theorem 1 of Section 8.4 
Let Tbe an axiom system with a decidable set of axioms. Then the set 
of gódel numbers of the theorems of T'is a recursively enumerable set. 
(7) Theorem 2 of Section 8.4 
The theorems of a complete and consistent axiomatizable theory form 
a decidable set. 
(8) Gódel's First Incompleteness Theorem (BJ Theorem 6, page 179) 
There is no complete consistent axiomatizable extension of Q. 
(9) Gódel's Second Incompleteness Theorem (Section 8.6) 
If Z is consistent then — Prov('0 = 17) is not a theorem of Z. 


(We shall not test your understanding of the proofs of these theorems.) 


103 


Index (Units 5 to 8) 


Words 


Adequacy Theorem, 62 
antecedent, 24 
arithmetic, 94 
arithmetic symbols, 8 
assumptions in force, 19 
assumptions, rule of, 20 
atomic formula, 13 
axiom, 67 
axiomatizable, 95 
axiom system, 67 


bi-implication, truth table for, 25 
bound variable, 41 


characteristic function of a set, 93 
complete, 97 

conclusion, 23 

conditional proof, rule of, 32 
conjunction, truth table for, 23 
connective, 8 

consequence 

logical, 22 

tautological, 30 
consequent, 24 

consistent, 92 

contingent, 67 

contradiction, 57 
Correciness Theorem, 62 


decidable set of sentences, BJ 174 
definable set of numbers, BJ 173 
diagonalization of a formula, BJ 172 
Diagonal Lemma, 91, BJ 173 
disjunction, truth table for, 24 
domain, 40, 66 

dummy variable, 41 


Elementary Peano Arithmetic, BJ 182 
existential hypothesis rule, 55 
existential quantifier, 8 

existential quantifier introduction rule, 
extension of a theory, BJ 174 


formal proof, 20 
formula, 14 
atomic, 13 
freely substituted, 46 
free variable, 41 
function 
characteristic, 93 
representable in Q, 80 
representable in T, 82 


gódel number, BJ 170, 171 


Gódel's First Incompleteness Theorem, 98, BJ 


Gódel's Second Incompleteness Theorem, 


identity introduction rule, 59 
identity symbol, 8 
implication, truth table for, 25 
independent, 77 
induction 
axioms for, BJ 182 
mathematical, 98 
interpretation of V, 3, 66 
interpretation 
non-standard, 66, 75 
standard, 66 


language, basic symbols of, 8 
leading connective occurrence, 16 
leading symbol occurrence, 36 
length function, 90,BJ 172 

Lób's Theorem, BJ 187 

logical consequence, 22 

logically valid, 22 

logical symbols, 8 


mathematical induction, 98 


negation, truth table for, 24 
non-standard interpretation, 66, 75 


occurrence, 42 


Peano Arithmetic, Elementary, 100, BJ 182 


premise, 23 

proof 

conditional, 32 

formal, 20 

provability predicate, BJ 185 


Q, axioms of the system, 68 
quantifier 

existential, 8 

universal, 8 


recursively enumerable set, 95 
recursive set, 93 
Representability Theorem, 82 
representable function 

in Q, 80 

in T, 82 
represents, 80 


rules 


assumptions (Ass), 20 

conditional proof (CP), 32 

existential hypothesis (EH), 55 

existential quantifier introduction (ED, 53 
identity introduction (II, 59 

substitution (SR), 60 

tautology (Taut) 31 

universal quantifier elimination (UE) 47 

universal quantifier introduction (UI) 48 


satisfiable, 92 
sentence, 43 
standard interpretation, 66 
subformula, 16 
substituted, freely, 46 
substitution rule, 60 
symbol 

arithmetic, 8 
basic, 8 

logical, 8 

system, axiom, 67 


tautological consequence, 30 
tautology, 29 


tautology rule, 31 
term, 10 
theorem, 67 
theory, 67, 91 
truth table 
for &, 23 
for —, 24 
for v, 24 
for >, 25 
fore, 25 
truth value, 23 
turnstile, 50 


universal quantifier, 8 

universal quantifier elimination rule, 47 
universal quantifier introduction rule, 48 
universe of discourse, 40 


valid, logically, 22 
variable, 8 


Z, axioms for, BJ 182 


Function Names and Special Symbols 


& 8,23 
Ass 20 v 8, 24 
CP 32 > 8, 24 
conj 90 ey 8,25 
diag BJ 172 = 8 
EH 55 + 69 
EI 53 v 8 

gn BJ 171 3 8 

II 59 0 8 

Ih 90, BJ 172 + 8 

n 69 á 8 
N BJ 172 8 
N* 75 Xun 8 
N** 75 0 23 
neg 90 1 23 
num BJ 172 $(t/x) 45 
Prov (y) 100 F 50 
Q, Q1-07 68 Fr 69 
SR 60 $(p,.. Pa) 79 
Taut 31 ‘A’ BJ 172 
UE 47 um 90 
UI 48 é 92 
Z BJ 182 R 92 


= 8, 24 * BJ 172 
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